基于 ARL 深度扩展与持续优化的互联网资产自动化收集平台，面向资产发现、暴露面梳理、风险排查与持续监测等场景，提供域名识别、子域名发现、测绘引擎查询、端口与服务识别、指纹分析、URL 提取、漏洞检测、计划任务与结果汇总等能力 系统适用于乙方专业安全厂商、甲方安全运维部门开展日常资产盘点、攻击面治理与安全运营、安服交付支撑工作。欢迎各位师傅提bug，共同维护～

DeepSeek Harness: Everything is a Plugin.

哥斯拉webshell管理工具二开

2026机场推荐与机场评测

SpaceXAI's coding agent harness and TUI. Fullscreen, mouse interactive, extensible.

An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.

将传统的k8s攻击手法进行整合，融入cdk的相关exp，接入llm并提供attack接口完成k8s自动化渗透。

A powerful WAF (HTTP 403/401) and URL parser bypass tool developed in Go, designed to preserve exact URL paths and structures during testing.

AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty

一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills b…

JMX enumeration and attacking tool.

nuclei file protocol engine

20 MB lightweight cross-platform database client for 70+ databases, including MySQL, PostgreSQL, SQLite, Redis, MongoDB, DuckDB, SQL Server, and Dameng. Built-in AI, MCP Server, CLI, desktop and Do…

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

一款针对K8s综合利用GUI工具

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…

AIRT — A free, open-source AI Red Teaming course with 8 modules and hands-on Docker labs. Built with Perplexity Computer.

Connect like there is no firewall. Securely.

An enhanced tool for CodexApp, striving to make Codex better to use and more comfortable 一个CodexApp的增强工具，努力让Codex变得更好用更舒服

后渗透信息/密码/凭证收集工具

A simple, decentralized mesh VPN with WireGuard support.

Dirtyfrag: Local privilege escalation PoC chaining ESP and rxrpc kernel bugs on Linux

M-SEC 社区的一款轻量化EDR系统（多功能检测与响应工具）

net-audit-skills

.NET deobfuscator and unpacker.