🎯 Command Injection Payload List

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

Attack surface mapping

🦄 A curated list of the awesome resources about the Vulnerability Research

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.

Subaru StarLink persistent root code execution.

A collection of my Semgrep rules to facilitate vulnerability research.

Apache Shiro 反序列化漏洞检测与利用工具

Python Command-Line Ghidra Binary Diffing Engine

VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE, CVE, MITRE ATT&CK, PCI DSS, issues import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT/JSON/MARKDOWN/HTML/PDF report, attachments, automatic changelog, statistics, vulnerability management, bug bounty, methodologies and more!!

Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.

LLEF is a plugin for LLDB to make it more useful for RE and VR

A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research.

Quarkslab conference talks

PolarDNS is a specialized authoritative DNS server suitable for penetration testing and vulnerability research.

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

Static Binary Instrumentation tool for Windows x64 executables

VerSprite Security Research

Quarkslab Bindiffer but not only !

Obfu[DE]scate is a de-obfuscation tool for Android APKs that uses fuzzy comparison logic to identify similarities between functions, even if they have been renamed as part of obfuscation. It compares two versions of an APK and generates a mapping text file and an interactive HTML file as outputs!