<!--lint disable awesome-contributing awesome-license awesome-list-item match-punctuation no-repeat-punctuation no-undefined-references awesome-spell-check-->

Awesome Stars

A curated list of my GitHub stars! Generated by starred.

Contents

• ASL
• ASP.NET
• ActionScript
• Ada
• Arduino
• Assembly
• AutoHotkey
• AutoIt
• Batchfile
• BitBake
• Blade
• BlitzBasic
• Boo
• C
• C#
• C++
• CMake
• CSS
• Classic ASP
• Clojure
• CodeQL
• ColdFusion
• Dart
• Dockerfile
• Emacs Lisp
• Erlang
• F#
• Fluent
• FreeMarker
• Go
• Groovy
• HCL
• HTML
• Hack
• Haskell
• Inno Setup
• Java
• JavaScript
• Jinja
• Jupyter Notebook
• KiCad Layout
• Kotlin
• LLVM
• Logos
• Lua
• MATLAB
• Makefile
• Markdown
• Mask
• Max
• Mustache
• NSIS
• Nginx
• Nim
• Nix
• Nunjucks
• OCaml
• Objective-C
• Objective-C++
• Open Policy Agent
• Others
• PHP
• PLpgSQL
• Pascal
• Perl
• PostScript
• PowerShell
• Propeller Spin
• Pug
• Python
• QMake
• REXX
• Rascal
• Rich Text Format
• Roff
• Ruby
• Rust
• SCSS
• Sage
• SaltStack
• Scala
• Scheme
• Shell
• Smali
• Smarty
• Solidity
• SourcePawn
• Starlark
• Svelte
• Swift
• TSQL
• Tcl
• TeX
• TypeScript
• VBA
• VBScript
• VCL
• Vim Script
• Visual Basic
• Visual Basic .NET
• Vue
• XSLT
• YAML
• YARA
• Zeek
• Zig
• nesC
• templ

ASL

• postgres-cn/pgdoc-cn - PostgreSQL manual Chinese translation by China PostgreSQL Users Group

ASP.NET

• Jean-Francois-C/Webshell-Upload-and-Web-RCE-Techniques - Classic Web shell upload techniques & Web RCE techniques

ActionScript

• appsecco/json-flash-csrf-poc - This repo contains the files required to perform a CSRF attack using Flash and HTTP 307 redirections.

Ada

• PatrikFehrenbach/amass-tools -

Arduino

• UnicycleDumpTruck/MissionControl - This kids' homework desk has top that flips up to reveal a space-themed control panel.
• spacehuhn/wifi_keylogger - DIY Arduino Wi-Fi Keylogger (Proof of Concept)

Assembly

• enkomio/AlanFramework - A C2 post-exploitation framework
• MortenSchenk/Token-Stealing-Shellcode -
• xenoscr/SysWhispers2 - AV/EDR evasion via direct system calls.
• timwhitez/Doge-Direct-Syscall - Golang Direct Syscall
• klezVirus/inceptor - Template-Driven AV/EDR Evasion Framework
• guitmz/memrun - Small tool to run ELF binaries from memory with a given process name
• DownWithUp/DynamicKernelShellcode - An example of how x64 kernel shellcode can dynamically find and use APIs
• mai1zhi2/SysWhispers2_x86 - X86 version of syswhispers2 / x86 direct system call
• jthuraisamy/SysWhispers2 - AV/EDR evasion via direct system calls.
• Cybereason/siofra -
• mytechnotalent/Reverse-Engineering - A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
• jjyr/jonesforth_riscv - Jonesforth RISC-V port.
• vxunderground/MalwareSourceCode - Collection of malware source code for a variety of platforms in an array of different programming languages.
• antonioCoco/Mapping-Injection - Just another Windows Process Injection
• jthuraisamy/SysWhispers - AV/EDR evasion via direct system calls.
• tinysec/windows-syscall-table - windows syscall table from xp ~ 10 rs4

AutoHotkey

• xianyukang/MyKeymap - 一款基于 AutoHotkey 的键盘映射工具
• goreliu/runz - RunZ，专业的快速启动工具
• kookob/smpic - Windows下面的SM.MS图床上传工具

AutoIt

• WildByDesign/ACLViewer - ACL Viewer for Windows

Batchfile

• lxgw/LxgwWenKai - An open-source Chinese font derived from Fontworks' Klee One. 一款开源中文字体，基于 FONTWORKS 出品字体 Klee One 衍生。
• gsuberland/lbfo_win10 - Re-enable NIC teaming (LBFO) in Windows 10 using components from Windows Server.
• SkyBlueEternal/jdk-change - 支持windows\linux\macOS | jdk一键切换版本\一键切换jdk版本\jdk版本更换
• 0xbinibini/emergency_response_batch - 应急响应，应急响应脚本，应急响应批处理；将Windows查看日志用户端口等命令集成在批处理脚本中。让熟练的应急人员能省去多次重复的敲击和记忆，并通过读取配置文件来调用Windows自带的命令结束进程服务等，本批处理尽量不调用任何外部的工具。任何调用的外部工具都将会存放在plugin目录下可按需使用，力图使用最原生的命令行来完成工作。
• SoraShu/easyconn-socks5-for-HITsz - 在服务器上运行easyconnect并建立socks5代理，实现win电脑上免安装easyconnect访问校园内网。
• r00t4dm/CVE-2020-27955 -
• swagkarna/Defeat-Defender-V1.2.0 - Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC
• wafinfo/cobaltstrike - cobaltstrike插件
• chroblert/JC-jEnv - windows java environ manage
• massgravel/Microsoft-Activation-Scripts - Open-source Windows and Office activator featuring HWID, Ohook, TSforge, KMS38, and Online KMS activation methods, along with advanced troubleshooting.
• sagishahar/lpeworkshop - Windows / Linux Local Privilege Escalation Workshop
• maguowei/k8s-docker-desktop-for-mac - Docker Desktop for Mac 开启并使用 Kubernetes
• ihacku/winhardening - windows 加固脚本
• frizb/Windows-Privilege-Escalation - Windows Privilege Escalation Techniques and Scripts
• acgbfull/IBM_Appscan_Batch_Scan_Script - IBM AppScan批量扫描脚本
• crazywifi/RDP_SessionHijacking - Passwordless RDP Session Hijacking
• mxk/windows-secure-group-policy - Windows 11 secure group policy for standalone devices
• so87/CISSP-Study-Guide - study material used for the 2018 CISSP exam
• Tai7sy/fuckcdn - CDN真实IP扫描，易语言开发
• NextronSystems/APTSimulator - A toolset to make a system look as if it was the victim of an APT attack
• auspbro/domain-admin-crack - :cactus: 入域电脑用户本地提权
• bartblaze/Disable-Intel-AMT - Tool to disable Intel AMT on Windows
• NuclearPhoenixx/fake-sandbox - 👁‍🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.
• wzulfikar/ngrok-caddy - Script to run ngrok with (optional) caddy server

BitBake

• xer0times/BugBounty - Bug Bounty stuffs, payloads, scripts, profiles, tips and tricks, ...

Blade

• dbarzin/mercator - Mapping the information system / Cartographie du système d'information

BlitzBasic

• Sy3Omda/burp-bounty - Burp Bounty profiles
• six2dez/burp-bounty-profiles - Burp Bounty profiles compilation, feel free to contribute!
• PortSwigger/scan-check-builder - Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.
• 1N3/IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
• ghsec/BBProfiles - Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

Boo

• byt3bl33d3r/SILENTTRINITY - An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

C

• ImKKingshuk/RootShield - RootShield : The Ultimate Shield for Rooted Android Devices - Protect your rooted Android device from unauthorized file operations and process executions! 🛡️ RootShield is a powerful kernel module tha
• google/security-research - This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
• linktools-toolkit/linktools - 记录了在移动端漏洞分析和合规扫描过程中涉及的一些常用功能，以Python库的方式提供使用
• varwara/CVE-2024-35250 - PoC for the Untrusted Pointer Dereference in the ks.sys driver
• hengyoush/kyanos - Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
• wangfly-me/LoaderFly - 助力每一位RT队员，快速生成免杀木马
• gianlucaborello/libprocesshider - Hide a process under Linux using the ld preloader (https://