Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
- active-directory
- powershell
- redteaming
- penetration-testing
76,855 visible repositories in the index
241–264 of 530 · Most stars
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
SSH-Snake is a self-propagating, self-replicating, file-less script that automates the post-exploitation task of SSH private key and host discovery.
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Linux Kernel Defence Map shows the relationships between vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies
Vulkan Quake port based on QuakeSpasm
A collection of JavaScript engine CVEs with PoCs
NCNN implementation of Real-ESRGAN. Real-ESRGAN aims at developing Practical Algorithms for General Image Restoration.
One stop shop for getting started with the Vulkan API
Graphics API Debugger
OWASP Web Application Security Testing Checklist
Tips and Tutorials for Bug Bounty and also Penetration Tests.
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
Run AI models locally on your machine with node.js bindings for llama.cpp. Enforce a JSON schema on the model output on the generation level
一个基于 docsify 快速部署 Awesome-POC 漏洞文档的项目。Deploying the Awesome-POC repository via docsify.
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Translate GPU shaders and compute kernels between GLSL, HLSL, Metal, SPIR-V, Slang, CUDA and HIP, and to WGSL, through the CrossGL IR
Java Vulnerability Exploitation Platform
A collection of tools, libraries, and tests for Vulkan shader compilation.
Jar Analyzer - 一个 JAR 包 GUI 分析工具,内置 AI 助手协助分析,支持 JAR DIFF 分析,方法调用关系搜索,方法调用链 DFS 算法分析,模拟 JVM 的污点分析验证 DFS 结果,字符串搜索,Java Web 组件入口分析,CFG 程序分析,JVM 栈帧分析,自定义表达式搜索等
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
A database of PHP security advisories
:new: The Multi-Tool Web Vulnerability Scanner.
A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development
Go middlewares for HTTP servers & proxies