Community curated list of templates for the nuclei engine to find security vulnerabilities.

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计

multiarch qemu system env for playing and debugging :)

通过hosts碰撞发现目标内部系统，扩大攻击面。

Kerberoast attack -pure python-

Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs

Port Scanner & Banner Identify From TianXiang

FinalShellDecodePass 加密解密

shellcode 异或加密并生成dll

云函数扫描器实现代码

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

EPS - BurpSuite Enhanced Passive Scanner

EPS - BurpSuite Enhanced Passive Scanner

A REST API security testing framework.

Binaries for the CodeQL CLI

proxylogon, proxyshell, proxyoracle and proxytoken full chain exploit tool

Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs

C# Utilities for Windows Notification Facility

Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitscript.com/site/autoit/)

⚙️
A curated list of dynamic analysis tools for all programming languages, binaries, and more.

前端参数加密渗透测试通用解决方案

解决web及移动端H5数据加密Burp调试问题

MAL-CL (Malicious Command-Line)

WinSCP Password Extractor/Decrypter/Revealer written in go language

一个 密钥检测/密钥分享/密钥查询/获取CID等微软产品激活 相关的小工具，小巧方便

Sophos-ReversingLabs 20 million sample dataset

Let's track phishing kits to give to research community raw material to study !

C# Utilities for Windows Notification Facility

A automatic bypass 403 Burpsuite plugin

DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具，自带WEB界面

A extract & decryption and pack & encryption tools for typora.

A extract & decryption and pack & encryption tools for typora.

Burp extension to create target specific and tailored wordlist from burp history.

955 不加班的公司名单 - 工作 955，work–life balance (工作与生活的平衡)

A repository that maps commonly used attacks using MSRPC protocols to ATT&CK

tun2socks - powered by gVisor TCP/IP stack

Takes host/port as input and tries to identify their transport layers. (PLAIN/TLS,http,mysql,redis ... )

POCs to test Vlang in cybersecurity aspects.

WIPE YOUR ASS WITH THE REAL COBALT STRIKE

HttpListener shell in csharp.

通过分析类与成员间的关系来对抗Proguard混淆规则.Anti proguard through analysing classes and members' relationship

Six Degrees of Domain Admin

OBS Studio filter for applying an arbitrary shader to a source.

PowerShell MachineAccountQuota and DNS exploit tools

《Spring Boot基础教程》，2.x版本持续连载中！点击下方链接直达教程目录！

基于python的微信机器人

List of all top-level domains in all data formats.

SQL / SQLI tokenizer parser analyzer

AdHoc solutions

The Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…

FinalShellDecodePass 加密解密

VMware vCenter 7.0.2.00100 unauth Arbitrary File Read + SSRF + Reflected XSS