Impacket is a collection of Python classes for working with network protocols.

E-mails, subdomains and names Harvester - OSINT

Python version of the Playwright testing and automation library.

Privacy-respecting metasearch engine

带带弟弟 通用验证码识别OCR pypi版

Companion code to my O'Reilly book "Flask Web Development", second edition.

Automated Adversary Emulation Platform

Windows Exploit Suggester - Next Generation

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public expl…

Malware Configuration And Payload Extraction

各种漏洞poc、Exp的收集或编写

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Stealing Signatures and Making One Invalid Signature at a Time

BloodyAD is an Active Directory Privilege Escalation Framework

Your Everyday Threat Intelligence

在线cms识别|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..

An email spoofing testing tool that aims to bypass SPF/DKIM/DMARC and forge DKIM signatures.🍻

A Telegram Mass Surveillance Bot in Python

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

OA综合利用工具，集合将近20款OA漏洞批量扫描

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components throug…

上传漏洞fuzz字典生成脚本

自动更新的纯真ip库，每天自动更新

实时监控github上新增的cve、自定义关键字、安全工具更新、大佬仓库监控，并多渠道推送通知

🚇暗网中文网监控爬虫(DEEPMIX)

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

c++ fully undetected shellcode launcher ;)

一款针对向日葵的识别码和验证码提取工具

在渗透测试中快速检测常见中间件、组件的高危漏洞。