Stars
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
GO Simple Tunnel - a simple tunnel written in golang
Monitor linux processes without root permissions
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
yisier / nps
Forked from ehang-io/nps基于NPS 0.26.10 版本二开而来，NPS接力项目。免费NPS节点：https://natnps.com
ScareCrow - Payload creation framework designed around EDR bypass.
🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.
✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时…
DetectDee: Hunt down social media accounts by username, email or phone across social networks.
一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接
渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理
Practice Go programming and implement CobaltStrike's Beacon in Go
Real fucking shellcode encryptor & obfuscator tool
shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软
BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.