cream-sec
Follow
Stars
Modern C++ Programming Course (C++03/11/14/17/20/23/26)
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
🚨 GROW YOUR AUDIENCE WITH HUGOBLOX! 🚀 HugoBlox is an easy, fast no-code website builder for researchers, entrepreneurs, data scientists, and developers. Build stunning sites in minutes. 适合研究人员、企业家、…
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …
Gather and update all available and newest CVEs with their PoC.
🎉 (RuoYi)官方仓库 基于SpringBoot的权限管理系统 易读易懂、界面简洁美观。 核心技术采用Spring、MyBatis、Shiro没有任何其它重度依赖。直接运行即可用
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
Web Fuzzing Box - Web 模糊测试字典与一些Payloads
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
基于 docsify 快速部署 Awesome-POC 中的漏洞文档
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
社会工程学密码生成器，是一个利用个人信息生成密码的工具
Java漏洞学习笔记 Deserialization Vulnerability
学习安全运营的记录 | The knowledge base of security operation
RGPerson - Randomly generate identity information
JAVA 漏洞靶场 (Vulnerability Environment For Java)