泉哥

secbook. 信息安全从业者书单推荐

vul_war. 《漏洞战争：软件漏洞分析精要》配套资料

SecConArchive. Security Conference Archive

riufuzz-pub. riufuzz —— honggfuzz modifited version by riusksk, better support for windows (cdb symbols) and macOS, and more colorful UI

BDOpener. 开启APK调试与备份选项的Xposed模块

FlashScanner. Flash XSS Scanner

StrutScan. Struts2 Vuls Scanner base perl script

vul_war_error. 《漏洞战争：软件漏洞分析精要》勘误表

riusksk.github.io. riusksk's blog：

rp. rp++ is a full-cpp written tool that aims to find ROP sequences in PE/Elf/Mach-O x86/x64 binaries. It is open-source and has been tested on several OS: Debian / Windows 8.1 / Mac OSX Lion (10.7.3). Moreover, it is x64 compatible and supports Intel syntax. Standalone executables can also be directly downloaded.

shellsploit-library. Exploit development library for python users

AndroidKernelExploitationPlayground. C

backdoor-apk. backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

frida-qbdi-fuzzer. This experimetal fuzzer is meant to be used for API in-memory fuzzing on Android.

EdgeDbg. A simple command line exe to start and debug the Microsoft Edge browser.

Fox-scan. Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.

1000php. 1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

FlashHacker. Flash Instrumentation Tool

Android_Kernel_CVE_POCs. A list of my CVE's with POCs

fbctf. Platform to host Capture the Flag competitions

Tide. 目前实现了网络空间资产探测、指纹检索、漏洞检测、漏洞全生命周期管理、poc定向检测、暗链检测、挂马监测、敏感字检测、DNS监测、网站可用性监测、漏洞库管理、安全预警等等~

android_unpacker. A (hopefully) generic unpacker for packed Android apps.

WechatEnhancement. 微信Xposed插件，支持抢红包，消息防撤回，朋友圈防删除，朋友圈去广告

Awesome-Advanced-Windows-Exploitation-References. List of Awesome Advanced Windows Exploitation References

OLLVM_Deobfuscation. OLLVM_Deobfuscation is a Python-based ollvm deobfuscation tool, which now has a perfect performance on ollvm confused C / C + + code compiled on x86 architecture based Linux platform.

project-based-learning. Curated list of project-based tutorials

SecLists. SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

FuzzingPaper. Recent Fuzzing Paper

Code-Audit-Challenges. Code-Audit-Challenges

iOSAppHook. 专注于非越狱环境下iOS应用逆向研究，从dylib注入，应用重签名到App Hook

AFL. american fuzzy lop - a security-oriented fuzzer

Mars. Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

algorithm-visualizer. :fireworks:Interactive Online Platform that Visualizes Algorithms from Code

OSXFuzz. macOS Kernel Fuzzer

clusterfuzz. All your bug are belong to us.

JS-Sorting-Algorithm. 一本关于排序算法的 GitBook 在线书籍 《十大经典排序算法》，使用 JavaScript & Python & Go & Java 实现。

nautilus-fuzz. A grammar based feedback Fuzzer

awesome-spider. 爬虫集合

retoolkit. Reverse Engineer's Toolkit

awesome-iot-hacks. A Collection of Hacks in IoT Space so that we can address them (hopefully).

SockFuzzer. C

ViridianFuzzer. Kernel driver to fuzz Hyper-V hypercalls

manul. Manul is a coverage-guided parallel fuzzer for open-source and blackbox binaries on Windows, Linux and MacOS

secure-ios-app-dev. Collection of the most common vulnerabilities found in iOS applications

pwn2own2018. A Pwn2Own exploit chain

objection. 📱 objection - runtime mobile exploration

BlueLotus_XSSReceiver. XSS平台 CTF工具 Web安全工具

ManuFuzzer. Binary code-coverage fuzzer for macOS, based on libFuzzer and LLVM

HexRaysDeob. Hex-Rays microcode API plugin for breaking an obfuscating compiler

AUTO-EARN. 一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

iOSRE. iOS Reverse Engineering

exploit_generator. Automated Exploit generation with WinDBG

OpenXMolar. An MS OpenXML Format Fuzzing Framework

js-vuln-db. A collection of JavaScript engine CVEs with PoCs

kernel-fuzzing. Fuzzers for the Linux kernel

pwntools-write-ups. A colleciton of CTF write-ups all using pwntools

idaplugins-list. A list of IDA Plugins