Stars
📚 Freely available programming books
Rich is a Python library for rich text and beautiful formatting in the terminal.
Automatic SQL injection and database takeover tool
Turn (almost) any Python command line program into a full GUI application with one line
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
CTF framework and exploit development library
Python based web automation tool. Powerful and elegant.
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
curl-impersonate: A special build of curl that can impersonate Chrome & Firefox
A True Instrumentable Binary Emulation Framework
Automated All-in-One OS Command Injection Exploitation Tool
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Python binding for curl-impersonate fork via cffi. A http client that can impersonate browser tls/ja3/http2 fingerprints.
Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share th…
Veil 3.1.X (Check version info in Veil at runtime)
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能