AI-driven pi-like agent for cyber security — single binary for pentest, red team, bug bounty

最强大的密码爆破/喷洒工具 | The most powerful bruteforcer / sprayer Artifact

一个会操作浏览器、会抓包改包、会按照方法论执行、会自己验证漏洞的自动化渗透测试 Agent

面向APP/Web 加解密逆向分析、渗透测试人员的可视化解密框架

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

Claude Code RedTeam Skill — Hypothesis-Driven Cognitive Architecture。一个假设-证据驱动的红队skill

AI 自主渗透测试系统

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

New generation of wmiexec.py

⌘⌘ - A lightweight, native macOS screenshot tool that lives in your menu bar. Double-tap ⌘ Command to capture any region of your screen — instantly copied to clipboard, or annotate first with pen a…

macos finder contextmenu

KeyCastr, an open-source keystroke visualizer

The menu bar manager for macOS

移动安全漏洞挖掘专家SKILL，基于 HackerOne 真实报告的移动安全漏洞挖掘知识库，提供 Android 和 iOS 应用的漏洞挖掘手法、技术细节和代码模式分析。

Alien is a modular webshell client developed for cybersecurity research and education. It provides a unified post-exploitation framework for managing different web technologies through reusable mod…

RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

基于Chrome开发者协议(CDP)的AI自动化JavaScript逆向分析工具

LuaN1aoAgent is a fully autonomous AI penetration testing agent driven by graph-based cognitive reasoning, developed by postgraduate researchers from Prof. Lu Hui's Intelligent Offensive and Defens…

Certighost POC

A native terminal workspace for macOS.

Consider it done. The open-source AI agent that works out of the box · 想到，就能做到。开源、开箱即用的 AI Agent。

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

Turacos 是一款专业的多数据库安全评估工具，支持 PostgreSQL、MySQL、Redis、MSSQL 等多种数据库的后渗透操作。 为安全研究人员提供系统化、模块化的数据库安全测试能力，助力企业进行安全评估与漏洞验证。

xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。

MSDAT: Microsoft SQL Database Attacking Tool

通过 Redis 主从写出无损文件

MDUT-Extend(扩展版本)

A C# MS SQL toolkit designed for offensive reconnaissance and post-exploitation.

适合在命令行中使用的轻巧的SQL Server数据库安全检测工具

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。