Vibe Coding 从入门到精通教程｜AI 结对编程工作流｜Prompt、Skill、Workflow、上下文管理、codex实战指南

Privacy-first, Free, Open Source email verifier

Check if an email address exists without sending any email, written in Rust. Comes with a ⚙️ HTTP backend.

Linux提权

This repo contains scripts to query dehashed.com and crack the returned hashes which will then save all cleartext passwords and hashes to files.

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

OSINT Tool: Generate username lists for companies on LinkedIn

Wordlists for creating statistically likely username lists for use in password attacks and security testing. Used for pentesting for over 10 years with amazing results.

Fast, zero-dependency credential testing tool in Go. Brute force SSH, MySQL, PostgreSQL, Redis, MongoDB, SMB, and 20+ protocols. Hydra alternative with native nerva/naabu pipeline integration.

Muki is an active asset fingerprinting tool built for red teams — powered by 30,000+ precision signatures, proxy rotation, and intelligent deduplication to rapidly surface high-value targets from c…

Upload Forge is a powerful, production-grade security tool designed to detect and exploit file upload vulnerabilities in web applications. Built for penetration testers and security researchers, it…

Attack and defend active directory using modern post exploitation adversary tradecraft activity

CIDR IP ranges by country for geolocation, firewall rules, network filtering, and cybersecurity – updated hourly for IPv4 and IPv6. Curated by EbraSha – Abdal Security Group

A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.

Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS, Arch Linux and more

OpenVPN road warrior installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS and Fedora

Bypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens from Chrome, Edge, Brave & Avast - fileless, user-…

Turn any webpage/HTML/Vue/React and so on into desktop and mobile app under 5M with easy in few minutes. 轻松将任意网站/HTML/Vue/React等项目构建为轻量级(小于5M)多端桌面应用和手机应用仅需几分钟. https://ppofficial.netlify.app

Turn any webpage/HTML/Vue/React and so on into desktop and mobile app under 5M with easy in few minutes. 轻松将任意网站/HTML/Vue/React等项目构建为轻量级(小于5M)多端桌面应用和手机应用仅需几分钟. https://ppofficial.netlify.app

Turn any webpage/HTML/Vue/React and so on into desktop and mobile app under 5M with easy in few minutes. 轻松将任意网站/HTML/Vue/React等项目构建为轻量级(小于5M)多端桌面应用和手机应用仅需几分钟. https://ppofficial.netlify.app

GO Simple Tunnel - a simple tunnel written in golang

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available

Proxifier Alternative to redirect any Windows/MacOS/Linux TCP and UDP traffic to HTTP/Socks5 proxy

Curated resources for malware dev, reverse engineering, and defensive security research.

Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel

C2 infrastructure over Microsoft Teams.