An open project to list all publicly known cloud vulnerabilities and CSP security issues

A blazingly fast LSP client for Emacs

A software attempt to address the "double key press" issue on Apple's butterfly keyboard [not actively maintained]

TCP connection hijacker, Rust rewrite of shijack

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

MASA CMS is an Enterprise Content Management platform based on open source technology.

DSL engine

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Jar Analyzer - 一个JAR包分析工具，SCA漏洞分析，批量分析JAR包，方法调用关系搜索，字符串搜索，Spring组件分析，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Adversary Emulation Framework

一个漏洞POC知识库 目前数量 1000+

Comfortably monitor your Internet traffic 🕵️‍♂️

Node.js 资源大全中文版。An awesome Node.js packages and resources

node.js command-line interfaces made easy

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

Cyber Security ALL-IN-ONE Platform

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

腾讯柠檬清理是针对macOS系统专属制定的清理工具。主要功能包括重复文件和相似照片的识别、软件的定制化垃圾扫描、可视化的全盘空间分析、内存释放、浏览器隐私清理以及设备实时状态的监控等。重点聚焦清理功能，对上百款软件提供定制化的清理方案，提供专业的清理建议，帮助用户轻松完成一键式清理。

WebSocket 内存马/Webshell，一种新型内存马/WebShell技术

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

Tai-e assignments for static program analysis

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Hash collisions and exploitations

A webshell and a normal file that have the same MD5

该项目用来记录，我用来练手的PHP代码审计项目。