AI-native automated software risk analysis skill. LLM-driven, Code-First approach for comprehensive security risk assessment, threat modeling, security testing, penetration testing, and compliance …

EGo is an open-source SDK that enables you to develop your own confidential apps in the Go programming language.

SDK for developing enclaves

web_attack

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

🦕 常用正则大全, 支持web / vscode / idea / Alfred Workflow多平台

安全服务集成化工具集

Go implementation of the Ethereum protocol

Infosec Wordlists and more.

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

精通以太坊 （中文版）

Automated & Manual Wordlists provided by Assetnote

A plugin that allows you execute python and get return to BurpSuite.

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

web3 source code flowchart diagrams

Simple, common-sense Bitcoin-themed Python ECC library

实战沉淀字典

一个用于在 macOS 上平滑你的鼠标滚动效果或单独设置滚动方向的小工具, 让你的滚轮爽如触控板 | A lightweight tool used to smooth scrolling and set scroll direction independently for your mouse on macOS

利用阿里云oss对象存储，来转发http流量实现（cs）Cobalt Strike、msf 上线等 这之间利用阿里云的相关域名进行通信。

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

✈️The commend client of ssr based Python3

Simple extensive tar-like archive format with indexing

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

The most powerful Android RPA agent framework, next generation mobile automation.

🐳 Web3科学家极简入门指南

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

协程子域名爆破工具

新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.