Open-source alternatives to Processrefund

This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

some codes and notes about the backdoor listening on TCP-32764 in linksys WAG200G.

PHP Security Advisories Database

This repository contains several tools Project Zero uses to test iPhone messaging. It includes:

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Vulnerability Intelligence Platform

PeiQi-WIKI-Book is a cybersecurity knowledge base and security research wiki. It functions as a markdown static site generator that converts structured text files into a set of interconnected HTML pages. This system serves as a curated collection of technical documentation and guides focused on vulnerability research, code auditing, and penetration testing. The project utilizes a git-driven documentation workflow, using version control hooks to automatically update a live website when content changes. It features a client-side searchable index that allows users to find security topics without

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on

This repository is intended to host my research papers. Put it on watch if you would like to read more from me.

The iOS Mobile Backup Xtractor. It extracts backups... and stuff.

Pay me if you like this paper:)

kernel privilege escalation enumeration and exploitation framework

Masochist is a framework for creating XNU based rootkits. Very useful in OS X and iOS security research. It can do cool things like:

This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

A collection of JavaScript engine CVEs with PoCs

DOM XSS Test Cases Wiki is a KB for defining sources of attacker controlled inputs and sinks which potentially could introduce DOM Based XSS issues.