面向企业防守的搜索引擎钓鱼威胁情报与银狐投毒防护平台：多引擎采集 → 规则评分 → 动态取证 → AI 三通道严判 → 样本分析 → DNS 封堵闭环

《动手学大模型Dive into LLMs》系列编程实践教程

A new-generation counter-offensive honeypot that turns the tables on AI-powered pentest agents: plants decoy API keys into real services via a reverse proxy and uses reverse prompt injection to bri…

📚【更新中】AISecOps: AI-Driven Enterprise Security｜AI 驱动的安全体系。一套将 AI 能力嵌入企业安全体系的方法论框架，以及支撑它落地的完整工程实践——从安全架构、GRC、云原生、数据隐私到 SOC 运营、身份治理与 AI 系统安全。开源中文技术专著，CC BY-NC-SA 4.0。/*⚡🌊🛡️*/

📚 从零开始构建大模型

VMware to qcow2 conversion and VirtIO preparation toolkit

OWASP Agentic Applications Top 10 与 OWASP LLM Top 10 安全课件及案例分析

DVLAA (Damn Vulnerable LLM and Agent Application) is a local LLM and Agent security range for OWASP LLM Top 10 and Agent security training.

AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

MDUT - Multiple Database Utilization Tools

Weighs the soul of incoming HTTP requests to stop AI crawlers

MCP-native security automation workbench (SDK + CLI + MCP) — authorized testing + static AI/MCP attack-surface self-audit to SARIF / GitHub Code Scanning

Browser automation CLI for AI agents

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...

Native local development environment for Windows, macOS & Linux. A modern alternative to XAMPP, MAMP, Laragon and Laravel Herd, with runtimes, databases, web servers, local sites, HTTPS, AI coding …

Burp Plugin to Bypass WAFs through the insertion of Junk Data

Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, session recovery after /clear and compaction, per-turn re-injection against context rot, dete…

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

Mimikatz implementation in pure Python

Welcome to a calmer internet

“冰蝎”动态二进制加密网站管理客户端

Stealthy In-Memory Local Password Harvester (SILPH) tool: dump LSA, SAM and DCC2 with indirect syscall

中文翻译的 Hands-On-Large-Language-Models (hands-on-llms)，动手学习大模型

"Paper2Slides: From Paper to Presentation in One Click"

指纹识别、目录扫描，支持主动和被动

Java Vulnerability Exploitation Platform