Apache Spark Shell Command Injection Vulnerability

A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-version JDK restrictions

一个基于nano banana pro🍌的原生AI PPT生成应用，迈向真正的＂Vibe PPT＂; 支持上传任意模板图片；上传任意素材&智能解析；一句话/大纲/页面描述自动生成PPT；口头修改指定区域、一键导出 - An AI-native PPT generator based on nano banana pro🍌

Explanation and full RCE PoC for CVE-2025-55182

CVE-2025-55182 POC

Open-source AI agents for penetration testing

An evolving repository of CloudTrail events with detailed descriptions, MITRE ATT&CK insights, real-world incidents, references and security implications

The modern Java bytecode editor

LLM-JailHunter 越狱猎手 — 自动化检测 LLM 越狱攻击，生成安全评分与可视化报告。支持多模型并行测试，兼容 OpenAI 接口。中文友好，开箱即用。

Rogue MySql Server

a rep for documenting my study, may be from 0 to 0.1

JDBC Connection URL Attack

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Provide many versions of images of docker and docker's components

最好用最智能最可控的目录Fuzz工具 | The most powerful, user-friendly, intelligent, and precise HTTP Fuzzer.

MCP 资源精选， MCP指南，Claude MCP，MCP Servers, MCP Clients

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

A small utility to modify the dynamic linker and RPATH of ELF executables

TCP connection hijacker, Rust rewrite of shijack

🏋 Modern open-source fitness coaching platform. Create workout plans, track progress, and access a comprehensive exercise database.

全自动化，微信小程序 wxapkg 包 源代码还原工具, 线上代码安全审计，支持 Windows, Macos, Linux

Security scanner for MCP servers

2025年12月更新，目前国内可用Docker镜像源汇总，DockerHub国内镜像加速列表，🚀DockerHub镜像加速器

纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY 的利用

A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and easy-to-use AI Red Teaming platform developed by Tencent Zhuque Lab.

Visual testing tool for MCP servers

A tool specifically designed for Kubernetes environments aims to efficiently and automatically discover hidden vulnerable APIs within clusters.

A Nuclei security scanning server based on MCP (Model Control Protocol), providing convenient vulnerability scanning services.一个基于 MCP (Model Control Protocol) 的 Nuclei 安全扫描服务器，提供便捷的漏洞扫描服务。

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.