CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

WSUS Unauthenticated RCE

Scan/Exploit - EternalBlue MS17-010 - Windows 7 32/64 Bits

The Tari protocol

2023HW漏洞整理

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

MSDAT: Microsoft SQL Database Attacking Tool

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描

Mirror Flowers 是一个开箱即用的代码安全审计工具，集成本地静态扫描（行级污点追踪 + AST）与 AI 验证，帮助你快速发现并定位高风险问题，并给出修复建议。

SQL Server weak password batch command execution.

A PowerShell script anti-virus evasion tool

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

Tool to create hidden registry keys.

首个由DeepSeek独立开发的AI网络安全工具箱

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

DudeSuite Web Security Tools

PowerShell Obfuscator

收集的文章 https://mrwq.github.io/tools/paper/

记录一些代码审计过的源码

记录一下 Java 安全学习历程，也算是半条学习路线了

ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes

中文羊驼大模型三期项目 (Chinese Llama-3 LLMs) developed from Meta Llama 3

Agent Framework For Fintech

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

ODAT: Oracle Database Attacking Tool

Web Fuzzing Box - Web 模糊测试字典与一些Payloads