Open-source alternatives to Notes

This project is a comprehensive web application penetration testing guide and vulnerability research framework. It provides a structured methodology for identifying and exploiting security flaws through a phased approach involving reconnaissance, analysis, and exploitation. The resource is distinguished by its use of a curated methodology framework that links theoretical vulnerability patterns to real-world bug bounty reports and historical exploit examples. It includes a payload-based testing library and a reference system that maps specific vulnerability categories to recommended third-part

some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.

PHP Security Advisories Database

This repository contains several tools Project Zero uses to test iPhone messaging. It includes:

The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Vulnerability Intelligence Platform

PeiQi-WIKI-Book is a cybersecurity knowledge base and security research wiki. It functions as a markdown static site generator that converts structured text files into a set of interconnected HTML pages. This system serves as a curated collection of technical documentation and guides focused on vulnerability research, code auditing, and penetration testing. The project utilizes a git-driven documentation workflow, using version control hooks to automatically update a live website when content changes. It features a client-side searchable index that allows users to find security topics without

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on

This repository is intended to host my research papers. Put it on watch if you would like to read more from me.

The iOS Mobile Backup Xtractor. It extracts backups... and stuff.

Pay me if you like this paper:)

kernel privilege escalation enumeration and exploitation framework

Masochist is a framework for creating XNU based rootkits. Very useful in OS X and iOS security research. It can do cool things like:

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

A collection of JavaScript engine CVEs with PoCs