HarmonyOS NEXT Decompiler(纯血鸿蒙反编译器)

A comprehensive list of usable Entra ID first-party clients with pre-consented Microsoft Graph scopes, in a simple YAML-file explorable with a simple HTML GUI.

Red Team Arsenal - a comprehensive collection of tools, scripts, and techniques for conducting red team operations and adversary simulations, including custom beacons, malleable C2 profiles, aggressor scripts, advanced payload generation methods, as well as other evasion tools, tailored for red team operations and security research.

Research about gmail's cookies, how to read and write mails with only 4 cookies.

Advanced offline firmware triage and analysis tool for routers, IoT devices, DVRs, IP cameras, and embedded Linux firmware.

This tool is an implementation of the Telegram Bot API for Linux terminal use. It's ment for quick OSINT and grading useful information or to do things like takedown, destroy or grab messages. Note, this tool is converted from a web-tool I once made to C++ and done so via Claude.

A Dockerized environment for Kali Linux, optimized for penetration testing and security research.This repository contains a Dockerfile to build and run a Kali Linux container with a graphical user interface (GUI) accessible via Remote Desktop Protocol (RDP).

TradMod's Security Reviews Portfolio, Audits and Bug Report Findings

Polymorphic PowerShell Exec Framework. Rev Shell Payload Obfuscation, Defender Evasion Tactics, Encrypted C2 Tunnel.

All about Bugz Learning Resources | Tools | Writeups >> [This repository is continuously updated with regard to my own learning journey]

All-in-One Master ASN Processing with 0x ASN Processor | CIDR, DNS, IP & Port Scanning Made Easy!

Your Ultimate Companion for Security Testing and Vulnerability Tracking

Offensive Security Research, Corporate Espionage Investigation

CVE-2025-33053 Checker and PoC

Python tool for firmware diffing using SHA256 and ssdeep fuzzy hashing to detect modified, added, and deleted files between firmware versions

Adaptive WAF fingerprinting and payload analysis framework for application security research with concurrent scanning, mutation engine, and HTML/JSON reporting

A personal repository of solutions, writeups, and low-level code for Reverse Engineering, Binary Exploitation (Pwn), and x86/x86_64 Assembly. Includes walkthroughs for pwnable.kr, ROP Emporium, and crackmes.one, featuring custom exploit scripts, Python keygens, and static/dynamic binary analysis.

(Luau) SmeersLightsHandler RemoteEvent Vulnerability Disclosure

During security testing, I identified an authorization vulnerability affecting API endpoints responsible for user management. Although the application required authentication, the backend did not adequately verify whether the authenticated user was authorized to perform sensitive operations on the targeted resources.