shiro反序列化漏洞综合利用（仅限授权测试使用）

Nacos 综合漏洞利用工具

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

灯塔（最新版）指纹添加脚本！

🖱️ 纯粹的Windows右键菜单管理程序

A rule-based tunnel for Android.

A modern GUI client based on Tauri, designed to run in Windows, macOS and Linux for tailored proxy experience

edgetunnel2 VLESS/Trojan/SS 多功能面板

Shannon Lite is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities bef…

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

跨平台微信小程序反编译 GUI 工具，.wxapkg 文件扫描 + 解密 + 解包工具

个人信息 “泄漏” 检测接口

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

HeapDump敏感信息提取工具

A Swagger API Exploit

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

个人爬虫代码分享

WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

Click-to-run debian 13 with desktop environment on android for Chinese users, with fcitx pinyin input method and some useful packages preinstalled. You don't need to install Termux.

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Official DeepSound repository migrated from jpinsoft.net. DeepSound is a freeware steganography tool and audio converter that hides secret data into audio files. The application also enables you to…

Fast web fuzzer written in Go

HTTP parameter discovery suite.

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

编译好的SourceDetector

🔭 Reverse engineering JavaScript and CSS sources from sourcemaps

一个好玩的Web安全-漏洞测试平台