A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Find, verify, and analyze leaked credentials

A fast TCP/UDP tunnel over HTTP

In-depth attack surface mapping and asset discovery

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

Adversary Emulation Framework

Reconnaissance tool for GitHub organizations

A Tool for Domain Flyovers

Monitor linux processes without root permissions

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

A Security Tool for Bug Bounty, Pentest and Red Teaming.

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

👻Stowaway -- Multi-hop Proxy Tool for pentesters

A tool to perform Kerberos pre-auth bruteforcing

微信小程序反编译工具，.wxapkg 文件扫描 + 解密 + 解包工具

无状态子域名爆破工具

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

边界打点后的自动化渗透工具

一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

Practice Go programming and implement CobaltStrike's Beacon in Go

apk加固特征检查工具，汇总收集已知特征和手动收集大家提交的app加固特征，全网最全开源加固特征，支持40+厂商的加固检测，欢迎大家提交无法识别的app

阿里云ECS、策略组辅助小工具

Golang写的土司自动签到程序(推送,检测是否成功,没成功一小时后再执行)