Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.

An HTTP proxy library for Go

数据库自动取样工具 - The tool used to extract the information from databases quickly.

This map lists the essential techniques to bypass anti-virus and EDR

Mssql利用工具

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。

A tool for exploring each layer in a docker image

cloudgrep is grep for cloud storage

Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.

强制认证扫描与利用

集权设施扫描器

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

安卓应用层抓包通杀脚本

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗

用于生成各类免杀webshell

windows service

The swiss army knife of LSASS dumping

Fileless lateral movement tool that relies on ChangeServiceConfigA to run command

C# Wrapper around Chisel from https://github.com/jpillora/chisel

Active Directory certificate abuse.

Cobalt Strike Malleable C2 Design and Reference Guide

Linux Eelvation(持续更新)

Redis(<=5.0.5) RCE

You Know, For WEB Fuzzing !

Scanning APK file for URIs, endpoints & secrets.

SSH based reverse shell

Java RMI Vulnerability Scanner

高性能 HTTP 正向代理工具 | A high-performance http tunneling tool

A (partial) Python rewriting of PowerSploit's PowerView