一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in se…

FastAdmin 前台文件上传RCE

some tools

通过 Redis 主从写出无损文件

PHP代码审计分段讲解

一个关于PHP的代码审计项目

对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描

Linux 环境部署脚本，一键配置系统设置，安装常用工具/开发环境/渗透测试工具等

The Windows 10 Icon theme repository

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

My experiments in weaponizing Nim (https://nim-lang.org/)

Nim 核心编程

该项目用来记录，我用来练手的PHP代码审计项目。

Intranet penetration tools

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.

HERCULES is a special payload generator that can bypass antivirus softwares.

掩日 - 免杀执行器生成工具

Weaponizing for privileged file writes bugs with windows problem reporting

Handbook of information collection for penetration testing and src

Web安全中比较好的文章

Some tools to automate recon - 003random

bap - http Basic Authentication honeyPot

sitecopy is a tool that facilitates personal website backup and network data collection

Web-Security-Learning

Collection of Scripts for shodan searching stuff.