it is very good

Finding potential software vulnerabilities from git commit messages

🙃 A delightful community-driven (with 2,000+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, gi…

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

Nuclei Templates Collection

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Installation of RasPBX for beginners.

Java Agent Library to log SSL session keys to a file for Wireshark

A crossplatform mDNS enumeration tool.

Python version of the C# tool for "Shadow Credentials" attacks

Python tool to Check running WebClient services on multiple targets based on @leechristensen

Teleport是一款简单易用的堡垒机系统。

An Extensible Transpiler for PowerShell (and anything else)

TLD Parser in Go

Exploit for CVE-2022-30206

Hurl, run and test HTTP requests with plain text.

Vindicator is a lightweight Golang library that is designed to hold and check any blocking function. e.g. subprocess, network connection...

CyberSecurityRSS: 优秀的网络安全知识来源 / A collection of cybersecurity rss to make you better!

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

Library for working with PE32/PE32+ binaries' inner information.

Runs programs as TrustedInstaller

Run Processes as PPL with ELAM

Tool to bypass LSA Protection (aka Protected Process Light)

a C2 feature , ScreenShot capture , the file output is a png on the current directory named "screen.png"

Bypass Malware Time Delays

My Klipper config for my Ender 5 Plus

Tornado cash. Non-custodial private transactions on Ethereum.

Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Ex…

Blazing 💥 fast terminal-ui for git written in rust 🦀

burp验证码识别接口调用插件

Modern scheduling library for Python

Rusty Hell's Gate / Halo's Gate / Tartarus' Gate / FreshyCalls / Syswhispers2 Library

An open-source link shortener with built-in analytics + free custom domains.

DHook是一个动态修改应用运行中代码的工具，支持通过界面，插件，配置文件方式配置hook点。

Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

短信轰炸/短信测压/ | 一个健壮免费的python短信轰炸程序，专门炸坏蛋蛋，百万接口，多线程全自动添加有效接口，支持异步协程百万并发，全免费的短信轰炸工具！！hongkonger开发全网首发！！

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

Come and join us, we need you!

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

Blind WAF identification tool

SpringScan 漏洞检测 Burp插件

cve-2022-39197 poc

Linux Kernel Sanitizers, fast bug-detectors for the Linux kernel

C++ wrapper for the Java Native Interface

An on-chain and open-source blogging platform for everyone.

Self-hosted file/code/media sharing website.

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

搜集的或者自己写的poc或者exp

Program to reverse Docker images into Dockerfiles

Python exploit code for CVE-2021-4034 (pwnkit)

Implementation of disco-diffusion wrapper that could run on your own GPU with batch text input.

afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.