HarmonyOS NEXT Decompiler(纯血鸿蒙反编译器)
A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.
Red Team Arsenal - a comprehensive collection of tools, scripts, and techniques for conducting red team operations and adversary simulations, including custom beacons, malleable C2 profiles, aggressor scripts, advanced payload generation methods, as well as other evasion tools, tailored for red team operations and security research.
Research about gmail's cookies, how to read and write mails with only 4 cookies.
Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.
This tool is an implementation of the Telegram Bot API for Linux terminal use. It's ment for quick OSINT and grading useful information or to do things like takedown, destroy or grab messages. Note, this tool is converted from a web-tool I once made to C++ and done so via Claude.
A Dockerized environment for Kali Linux, optimized for penetration testing and security research.This repository contains a Dockerfile to build and run a Kali Linux container with a graphical user interface (GUI) accessible via Remote Desktop Protocol (RDP).
TradMod's Security Reviews Portfolio, Audits and Bug Report Findings
Polymorphic PowerShell Exec Framework. Rev Shell Payload Obfuscation, Defender Evasion Tactics, Encrypted C2 Tunnel.
All about Bugz Learning Resources | Tools | Writeups >> [This repository is continuously updated with regard to my own learning journey]
All-in-One Master ASN Processing with 0x ASN Processor | CIDR, DNS, IP & Port Scanning Made Easy!
Your Ultimate Companion for Security Testing and Vulnerability Tracking
Offensive Security Research, Corporate Espionage Investigation
CVE-2025-33053 Checker and PoC
Python tool for firmware diffing using SHA256 and ssdeep fuzzy hashing to detect modified, added, and deleted files between firmware versions
(Luau) SmeersLightsHandler RemoteEvent Vulnerability Disclosure
Adaptive WAF fingerprinting and payload analysis framework for application security research with concurrent scanning, mutation engine, and HTML/JSON reporting
A personal repository of solutions, writeups, and low-level code for Reverse Engineering, Binary Exploitation (Pwn), and x86/x86_64 Assembly. Includes walkthroughs for pwnable.kr, ROP Emporium, and crackmes.one, featuring custom exploit scripts, Python keygens, and static/dynamic binary analysis.
By injecting a malicious XML document containing an external entity, I was able to force the server to process a local file reference. The application returned the contents of the requested system file in the HTTP response, confirming **Arbitrary Local File Disclosure**.
Add a description, image, and links to the securityresearch topic page so that developers can more easily learn about it.
To associate your repository with the securityresearch topic, visit your repo's landing page and select "manage topics."