Here record some tips about pwn. Something is obsoleted and won't be updated. Sorry about that.

CTF write-ups from the VulnHub CTF Team

Custom security ruleset for the popular Java static analysis tool PMD.

A curated list of awesome reversing resources

Creates a SOCK proxy server that transmits data over an SSRF vulnerability

python安全和代码审计相关资料收集 resource collection of python security and code review

Various public documents, whitepapers and articles about APT campaigns

Main Sigma Rule Repository

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🔥Open source RASP solution

Real - time non-invasive AOP framework container based on JVM

各种漏洞poc、Exp的收集或编写

The cheat sheet about Java Deserialization vulnerabilities

The cheat sheet about Java Deserialization vulnerabilities

《Web安全之机器学习入门》

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Look-Ahead Java Deserialization Library

An adversarial example library for constructing attacks, building defenses, and benchmarking both

Docker-Compose file for vulnerability environment

a web crawler

CMS Exploit Framework