Stars
Build a database of libc offsets to simplify exploitation
🎁A convenient glibc binary and debug file downloader and source code auto builder
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems
Linux privilege escalation auditing tool
超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。
A small utility to modify the dynamic linker and RPATH of ELF executables
linux-kernel-exploits Linux平台提权漏洞集合
A GUI client for Windows, Linux and macOS, support Xray and sing-box and others
ELF file viewer/editor for Windows, Linux and MacOS.
python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。
The best tool for finding one gadget RCE in libc.so.6
TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。
Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…
The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
Platform for emulation and dynamic analysis of Linux-based firmware
GUI Framework on top of Killerbee
Protection Profile for Application Software