Open-source alternatives to Security Advisories

This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.

This repository contains several tools Project Zero uses to test iPhone messaging. It includes:

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Web mode:

Vulnerability Intelligence Platform

PeiQi-WIKI-Book is a cybersecurity knowledge base and security research wiki. It functions as a markdown static site generator that converts structured text files into a set of interconnected HTML pages. This system serves as a curated collection of technical documentation and guides focused on vulnerability research, code auditing, and penetration testing. The project utilizes a git-driven documentation workflow, using version control hooks to automatically update a live website when content changes. It features a client-side searchable index that allows users to find security topics without

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on

SecurityAdvisories is a software composition analysis tool and PHP security advisory database used to audit project dependencies against known security flaws and CVEs. It functions as a vulnerability scanner for PHP projects to identify and manage risky third-party libraries. The project implements a system for detecting and blocking vulnerable dependencies during the software development lifecycle. It prevents the installation of software packages with known security flaws by maintaining an exclusion list of forbidden versions. The tool integrates with the PHP package manager to intercept d

a javascript change monitoring tool for bugbounties

This repository is intended to host my research papers. Put it on watch if you would like to read more from me.

SensioLabs Security Checker

The iOS Mobile Backup Xtractor. It extracts backups... and stuff.

Pay me if you like this paper:)

kernel privilege escalation enumeration and exploitation framework

Masochist is a framework for creating XNU based rootkits. Very useful in OS X and iOS security research. It can do cool things like:

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i