Binaries for the CodeQL CLI

NVD, Ubuntu, Alpine

Impacket is a collection of Python classes for working with network protocols.

The world’s fastest framework for building websites.

Metasploit Framework

Soot - A Java optimization framework

The Cloud Native Application Proxy

🥑 Language focused docker images, minus the operating system.

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Transforms complex documents like PDFs into LLM-ready markdown/JSON for your Agentic workflows.

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and easy-to-use AI Red Teaming platform developed by Tencent Zhuque Lab.

A curated list of intriguing open-source security tools, with my reviews and insights.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

A clean, elegant and advanced blog theme for Hugo.

Distributed Task Queue (development branch)

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Elegant way to receive reverse shell

微信开发 Java SDK ，支持包括微信支付，开放平台，小程序，企业微信，视频号，公众号等的后端开发

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

Fast passive subdomain enumeration tool.

A fast, simple, recursive content discovery tool written in Rust.

完整开源！Java快速开发平台！基于Spring、SpringMVC、Mybatis架构，MStore提供更多好用的插件与模板（文章、商城、微信、论坛、会员、评论、支付、积分、工作流、任务调度等，同时提供上百套免费模板任意选择），价值源自分享！铭飞系统不仅一套简单好用的开源系统、更是一整套优质的开源生态内容体系。铭飞的使命就是降低开发成本提高开发效率，提供全方位的企业级开发解决方案，每月28…

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

Model Context Protocol Servers