AV Evasion Skill v5.2 是一套完整的 Shellcode 免杀方案，采用 Indirect Syscall、ETW 补丁、Module Stomping、.text Code Cave、字符串编译期加密、IPv4 混淆、XOR 加密、HeapAlloc 缓冲以及直接函数指针调用等技术，从静态特征、行为轨迹、EDR 感知三个层面绕过主流杀软和 EDR。

PacketLens - 浏览器内极速 pcap 深度分析工作台。纯前端、零后端、解密 HTTPS、百万级数据包秒开。

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

This is a Free and Open Source RAD tool for Custom Tkinter. This software allows you to create complex UI faster than ever⚡

Toolbox for HPE iLO4 & iLO5 analysis

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Gather and update all available and newest CVEs with their PoC.

各种安全相关思维导图整理收集。渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，数据安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

安全导图

Nuclei Templates Collection

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information g…

Golang Malware Framework

强大的敏感信息搜索工具

shellcode loader,bypassav,免杀，一款基于python的shellcode免杀加载器

支持x86/x64的DLL和Shellcode 的Windows注入的免杀工具，支持图形化界面

AutoRedTools是一款轻量级一站式自动下载/自动更新常用开源软件的工具，主要帮助安全从业者/安全开发人员快速进行环境搭建以及常用软件的更新，节约软件的更新或者安 装的时间，从而提升生产效率或工作效率。

塑造未来的安全领域智能革命

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

The fastest and more comprehensive multiprotocol credentials bruteforcer / password sprayer and enumerator. 🥷

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Modifying SweetPotato to support load shellcode and webshell

👻Stowaway -- Multi-hop Proxy Tool for pentesters

Top disclosed reports from HackerOne

Captcha solver extension for humans, available for Chrome, Edge and Firefox

An easy and fast way to create a Python GUI 🐍

Arsenal is just a quick inventory and launcher for hacking programs

Pillager是一个适用于后渗透期间的信息收集工具

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。