vulnerable-scan

Here is some resources about macOS/iOS system security.

Local privilege escalation via PetitPotam (Abusing impersonate privileges).

Git All the Payloads! A collection of web attack payloads.

一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

[DEPRECATED] Assign Azure Active Directory Identities to Kubernetes applications.

Lock package.json with yarn

⚡ Worlds fastest steghide cracker, chewing through millions of passwords per second ⚡

基于Pocsuite3、goby编写的漏洞poc&exp存档

Developer-friendly incident response with brilliant Slack integration

A collection of awesome one-liner scripts especially for bug bounty tips.

Kernel Driver Utility

Decrypted content of eqgrp-auction-file.tar.xz

Demonstrate changes to `package-lock.json` by `npm install`

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

Scans Software Bill of Materials (SBOMs) for security vulnerabilities

PoC exploits for software vulnerabilities

Intentionally vulnerable Node.js REST API for benchmarking SAST, SCA, and code quality tools. Contains 30 real, functional issues across Critical/High/Medium/Low severities covering SQL injection, command injection, path traversal, IDOR, hardcoded secrets, and more. Not for production use.

JQF + Zest: Coverage-guided semantic fuzzing for Java.

ZipArchive is a simple utility class for zipping and unzipping files on iOS, macOS and tvOS.

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more