Smart keylogging capability to steal SSH Credentials including password & Private Key

COM Hijacking VOODOO

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Obfuscate Go builds

RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging

使用 rust 实现 CobaltStrike 的 beacon || Using Rust to implement CobaltStrike's Beacon

Various tips & tricks

The FLARE team's open-source tool to identify capabilities in executable files.

declutters url lists for crawling/pentesting

Open Source Continuous File Synchronization

[Support 0.46.3]（Reset Cursor AI MachineID & Auto Sign Up / In）自动注册 Cursor Ai ，自动重置机器ID ， 免费升级使用Pro功能: You've reached your trial request limit. / Too many free trial accounts used on this machine. …

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs

安全本应纯粹，规避内卷，用一杯咖啡回归安全的乐趣！SEC.CAFE 安全咖啡是一个安全爱好者的服务平台与社区。

An example reference design for a proposed BOF PE

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

psexecsvc - a python implementation of PSExec's native service implementation

.NET Post-Exploitation Utility for Abusing Explicit Certificate Mappings in ADCS

Reaping treasures from strings in remote processes memory

Faster Nmap Scanning with Rust

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Automation tool to testing and confirm the xss vulnerability.

A PoC for Early Cascade process injection technique.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

🧿 AutorizePro是一款强大越权检测 Burp 插件，通过增加 AI 辅助分析 && 进一步优化检测逻辑，大幅降低误报率，提升越权漏洞检出效率。 [ AutorizePro is a authorization enforcement detection extension for burp suite. By adding Ai-assisted analysis, it sign…