JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

域渗透一条龙

应急响应指南 / emergency response checklist

📦 Make security testing of K8s, Docker, and Containerd easier.

A Xposed Module for Android Penetration Test, with NanoHttpd.

免杀webshell生成工具

免杀webshell无限生成工具蚁剑版

使用掩码生成自定义中文用户名拼音爆破字典

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

SvnExploit支持SVN源代码泄露全版本Dump源码

电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具 | 已删库

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

Getting started with java code auditing 代码审计入门的小项目

Interesting APT Report Collection And Some Special IOCs

一款搜索引擎网址采集器，目前支持谷歌，其余搜索引擎可自己写模板拓展。

CVE-2020-2555 Python POC

👻Behold3r -- 收集指定网站的子域名，并可监控指定网站的子域名更新情况，发送变更报告至指定邮箱

Automated digital reconnaissance

E-mails, subdomains and names Harvester - OSINT

Termite is obsoleted by Alacritty. Termite was a keyboard-centric VTE-based terminal, aimed at use within a window manager with tiling and/or tabbing support.

Socks5 proxy server by golang

Venom - A Multi-hop Proxy for Penetration Testers

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

Miscellaneous exploit code

CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE

[discontinued] Mass exploiter of CVE 2015-8562 for Joomla! CMS

Library for parsing and printing compiled Android manifest files