Stars
An opinionated list of awesome Python frameworks, libraries, software and resources.
You Know, For WEB Fuzzing ! 日站用的字典。
Easy & Flexible Alerting With ElasticSearch
StackStorm (aka "IFTTT for Ops") is event-driven automation for auto-remediation, incident responses, troubleshooting, deployments, and more for DevOps and SREs. Includes rules engine, workflow, 16…
Python port of ShadowsocksR
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Universal and Transferable Attacks on Aligned Language Models
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
A powerful and useful hacker dictionary builder for a brute-force attack
KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。
python ip proxy tool scrapy crawl. 抓取大量免费代理 ip，提取有效 ip 使用
收集的文章 https://mrwq.github.io/tools/paper/
A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.
DNS Exfiltration tool for stealthily sending files over DNS requests.
Bypass firewall for traffic forwarding using webshell
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CV…
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.
Volatility plugin for extracts configuration data of known malware
Sandbox for automated Linux malware analysis.
Machine learning driven web application firewall to detect malicious queries with high accuracy.
A lightweight GPT model, trained to discover subdomains.