Stars
🪐 Markdown with superpowers — from ideas to presentations, articles and books.
A list of public penetration test reports published by several consulting firms and academic security groups.
Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target
Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist
Adversary simulation and Red teaming platform with AI
Production-Grade Container Scheduling and Management
中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
The swiss army chainsaw of terminal emulators
云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等
A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）
Attack and defend active directory using modern post exploitation adversary tradecraft activity
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Veil 3.1.X (Check version info in Veil at runtime)
Automated HTTP Request Repeating With Burp Suite
A collection of various awesome lists for hackers, pentesters and security researchers
Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.
heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等
一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
Privilege Escalation Enumeration Script for Windows