Fully autonomous AI Agents system capable of performing complex penetration testing tasks

All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, secur…

一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services

Java RCE 回显测试代码

注入JVM进程 动态获取目标进程连接的数据库

建议使用新版：https://github.com/jar-analyzer/jar-analyzer

蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

EXP for CVE-2023-28434 MinIO unauthorized to RCE

CVE-2023-32233: Linux内核中的安全漏洞

Syscall Shellcode Loader (Work in Progress)

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！

高性能 HTTP 正向代理工具 | A high-performance http tunneling tool

记录一下 Java 安全学习历程，也算是半条学习路线了

a rep for documenting my study, may be from 0 to 0.1

vhost password decrypt

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

阿里云ECS、策略组辅助小工具

分享几个直接可用的内存马，记录一下学习过程中看过的文章

A protective and Low Level Shellcode Loader that defeats modern EDR systems.

PHP Webshell with handy features

通过jsp脚本扫描java web Filter/Servlet型内存马

2021 hw