收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1100多个poc/exp，长期更新。

Curated list of project-based tutorials

Azur Lane bot (CN/EN/JP/TW) 碧蓝航线脚本 | 无缝委托科研，全自动大世界

Fortio load testing library, command line tool, advanced echo server and web UI in go (golang). Allows to specify a set query-per-second load and record latency histograms and other useful stats.

Bochs - Cross Platform x86 Emulator Project

A fork of AFL for fuzzing Windows binaries

TrueType and OpenType font fuzzing toolset

AddressSanitizer, ThreadSanitizer, MemorySanitizer

一些阅读源码和Fuzzing 的经验,涵盖黑盒与白盒测试..

The official mirror of the V8 Git repository

A tool for recognizing function symbol

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support

CVE-2021-1732 poc & exp; tested on 20H2

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

这是一个抓取浏览器密码的工具，后续会添加更多功能

PwnWiki 数据库搜索命令行工具；该工具有点像 searchsploit 命令，只是搜索的不是 Exploit Database 而是 PwnWiki 条目

边界打点后的自动化渗透工具

Build your personal knowledge base with Trilium Notes

Java Exp FrameWork

Zui is a powerful desktop application for exploring and working with data. The official front-end to the Zed lake.

World's fastest and most advanced password recovery utility

an awesome list of honeypot resources