A `.git` folder disclosure exploit

WPA/WPA2 密码字典，用于 wifi 密码暴力破解

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

渗透测试报告/资料文档/渗透经验文档/安全书籍

Detect and bypass web application firewalls and protection systems

A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and easy-to-use AI Red Teaming platform developed by Tencent Zhuque Lab.

Zero shot vulnerability discovery using LLMs

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Tool for advanced mining for content on Github

Minimal CLI coding agent by Mistral

TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

WebCrack是一款web后台弱口令/万能密码批量检测工具，在工具中导入后台地址即可进行自动化检测。

pwning IPv4 via IPv6

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

上传漏洞fuzz字典生成脚本

阿里云accesskey利用工具

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

自动化爬取并自动测试所有swagger接口

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

A modular vulnerability scanner with automatic report generation capabilities.

AWD攻防赛脚本集合

Generate smart and powerful wordlists

CrackQ: A Python Hashcat cracking queue system

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

鸣潮后台自动刷BOSS声骸

参数 | 字典 collections

首个由DeepSeek独立开发的AI网络安全工具箱

Software to identify the different types of hashes used to encrypt data and especially passwords