“This repository is maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), AI security, vulnerability research, exploit development, reverse engineering, and more. 🔥 Also check: https://hackertraining.org”

26.6k

5.0k

26.6k

GitPedia Card277/004

SafeLine

chaitin

Goapi-gatewayapplication-security

“SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.”

hacker101

Hacker0x01

SCSSclickjackingcsrf

“Source code for Hacker101.com - a free online web and mobile security class.”

grype

anchore

Gocontainer-imagecontainers

“A vulnerability scanner for container images and filesystems”

xray

chaitin

Vuepassive-vulnerability-scannerpoc

“一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档”

ysoserial

frohoff

Javadeserializationexploit

“A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.”

cve

trickest

HTMLcvecve-poc

“Gather and update all available and newest CVEs with their PoC.”

PoC-in-GitHub

nomi-sec

cveexploit

“📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.”

HowToHunt

KathanP19

bugbountybugbountytips

“Collection of methodology and test case for various web vulnerabilities.”

awesome-web-hacking

infoslack

appsechacking

“A list of web application security”

AllAboutBugBounty

daffainfo

bugbugbounty

“All about bug bounty (bypasses, payloads, and etc)”

faraday

infobyte

Pythonappsecburpsuite

“Open Source Vulnerability Management Platform”

SpringBootVulExploit

LandGrey

Javarcespring-actuator-vulnerability

“SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list”

device-activity-tracker

gommzystudio

TypeScriptbaileysexploit

“A phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)”

openvas-scanner

greenbone

Rustcfoo

“This repository contains the scanner component for Greenbone Community Edition.”

exphub

zhzyker

Pythoncve-2020-10199cve-2020-10204

“Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340”