一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

ZincSearch . A lightweight alternative to elasticsearch that requires minimal resources, written in Go.

GO Simple Tunnel - a simple tunnel written in golang

🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP po…

A fast TCP/UDP tunnel over HTTP

Open-Source Phishing Toolkit

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Adversary Emulation Framework

The Havoc Framework

A Workflow Engine for Offensive Security

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

An offline tool for querying IP geographic information and CDN provider. 一个查询IP地理信息和CDN服务提供商的离线终端工具.

An OOB interaction gathering server and client library

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

👻Stowaway -- Multi-hop Proxy Tool for pentesters

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services

Linux/Windows post-exploitation framework made by linux user

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

Reflective PE packer.

渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理

SSH based reverse shell

Practice Go programming and implement CobaltStrike's Beacon in Go

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

A tool for generating fake code signing certificates or signing real ones