Skip to content
View hxlxmj's full-sized avatar

Block or report hxlxmj

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse

Starred repositories

Showing results

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

Python 3,610 564 Updated Aug 12, 2026

Initial Access and Post-Exploitation Tool for Entra ID and M365 with a browser-based GUI

HTML 1,372 180 Updated Jun 9, 2026

BT tracker 服务器列表,提供全网最全的 tracker 列表,每日聚合并测试存活服务器,trackers_all.txt 为全量列表(2902 行),trackers_best.txt 为可用列表(1137 行)

Rust 1,469 152 Updated Aug 12, 2026

HackerOne资产更新 | 每日更新HackerOne资产,对HackerOne的资产进行爬行和整理,SRC资产更新仅会增加,不会进行删除,每天更新的可以进行差异化对比来获取到新的项目资产范围

Python 232 126 Updated Aug 12, 2026

Burpsuite Professional Latest Version 2026

Shell 2,884 695 Updated Jul 27, 2026

Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.

Go 418 55 Updated May 28, 2025

A collaborative, multi-platform, red teaming framework

JavaScript 4,695 612 Updated Aug 5, 2026

AdaptixC2 is a highly modular advanced redteam toolkit

C++ 3,492 642 Updated Aug 2, 2026

Instant Windows & Office Activation: 40–Second Solution

1,342 213 Updated Sep 17, 2025

A reference sheet of Windows 10 native icons and where they are located.

81 6 Updated May 26, 2022

Linux post exploitation tool for info gathering and exfiltration 🐧📡💀

Go 97 16 Updated Nov 13, 2025

(?i)((access_key|access_token|admin_pass|admin_user|algolia_admin_key|algolia_api_key|alias_pass|alicloud_access_key|amazon_secret_access_key|amazonaws|ansible_vault_password|aos_key|api_key|api_ke…

7 2 Updated May 5, 2022

Privilege Escalation Enumeration Script for Windows

PowerShell 3,905 507 Updated Jul 15, 2026

Find, verify, and analyze leaked credentials

Go 27,408 2,529 Updated Aug 12, 2026

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

Python 317 65 Updated Jun 22, 2024

Embed and hide any file in an HTML file

HTML 491 116 Updated Sep 27, 2017

The code I write in my blog

C++ 116 29 Updated Jun 27, 2026

GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & more.

Shell 264 56 Updated Mar 28, 2026

IP Finder tool, ipfinder collects IP addresses from Shodan search queries.

Go 17 5 Updated Dec 12, 2025

Permanently disable EDRs as local admin

PowerShell 129 14 Updated Dec 19, 2025

Here are the most interesting Shodan dorks (according to me)

108 13 Updated Dec 10, 2023

Subdomain Enumerator and Simple Crawler

Rust 451 93 Updated May 22, 2026

Collection of publicly available IPTV channels from all over the world

TypeScript 135,717 7,810 Updated Aug 12, 2026

This repository contains my preparation notes for CRTP and Red Teaming, focused on Active Directory attacks and defenses.

95 9 Updated Jan 31, 2025

Heavily obfuscated PowerShell reverse shell that can bypass Windows Defender

PowerShell 22 9 Updated Jan 3, 2025

A tool to create a JScript file which loads a .NET v2 assembly from memory.

C# 1,331 304 Updated Jan 18, 2021

Azure Post Exploitation Framework

PowerShell 248 22 Updated Oct 27, 2025
Next