《FRIDA操作手册》by @hluwa @r0ysue

Red Team Tactics, Techniques, and Procedures

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

A Powerful Subdomain Takeover Tool

Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94

Fast subdomains enumeration tool for penetration testers

Knock Subdomain Scan

Subdomain Takeover tool written in Go

AWS S3 Hacks

A JavaScript / TypeScript / Python / C# / PHP cryptocurrency trading API with support for more than 100 bitcoin/altcoin exchanges

智能合约的实例，里面包括简单的代币合约、高级代币合约、众筹合约。

Security Tool to Look For Interesting Files in S3 Buckets

Remote Administration Tool for Windows

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

blockchain reference and demos

《我用爬虫一天时间“偷了”知乎一百万用户，只为证明PHP是世界上最好的语言 》所使用的程序

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Cloudflare DNS Enumeration Tool for Pentesters

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

S2-046-PoC

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

A static analysis tool for security

A reviewed list of useful PHP static analysis tools