《动手学 Pi》：沿 15 个真实 checkpoint 从零构建 Pi-style Agent

《深入理解 AI Agent：设计原理与工程实践》（李博杰 著）开源主仓库：全书正文、编译版 PDF 与按章配套代码

https://adongwanai.github.io/AgentGuide | AI Agent开发指南 | LangGraph实战 | 高级RAG | 转行大模型 | 大模型面试 | 算法工程师 | 面试题库 | 强化学习｜数据合成

The headless browser for AI agents and web scraping

A Cloudflare/Turnstile captcha bypass API server.

PoCs and exploits for CVEs discovered by VEGA.

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

WebStrike 是一套以 Chromium 系浏览器扩展（Manifest V3） 为受控端点的指挥与控制（C2）套件。与传统以进程/驱动为主的 C2 相比，其工作重心落在 浏览器安全域：在合规授权与攻防演练场景下，可显著降低与终端 EDR 在 进程注入、驱动、内核回调 等层面的直接对抗成本，同时将能力锚定在用户 真实访问的 Web 会话 上。

⚡️ Streaming torrent client for the web

Lateral Movement Bof with MSI ODBC Driver Install

📧 Bypass DPI firewalls by tunneling TCP traffic as SMTP, ensuring secure and covert communication over standard email protocols.

Beacon Object File to Enable Chrome DevTools Protocol (CDP)

SpotifyC2 is a cybersecurity research project that demonstrates cloud-based command communication using Spotify playlists for command retrieval and Telegram for output delivery, without requiring t…

📚 《从零开始构建智能体》——从零开始的智能体原理与实践教程

An Agent Skill for designing cross-platform desktop apps that feel native — distilled from Raycast's 2.0 deep-dive and reverse engineering of Raycast Beta.app. Eight architectural tenets, four-laye…

Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 29 vulnerability techniques)

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

Open Source EDR for Windows

Modern Endpoint Detection & Response system for Windows (x64). Alpha version soon

Collect Windows telemetry for Maldev

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if hand…

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code…

A template for Rust based BOF-PEs

Shellcode injection using the Windows Debugging API

Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.

本仓库整理了网上可找的国科大深度学习考试题目，涵盖202，2021，2022，2023，2025年的题目与自行整理的答案

Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox