The agent that grows with you

Language-agnostic AI auditor that autonomously builds and refines adaptive knowledge graphs for deep, iterative code reasoning.

Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust.

A Rust Library about Cybersecurity and Nmap

A curated list of Rust code and resources.

XSS payloads designed to turn alert(1) into P1

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.

This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.

A clean, elegant, beautiful and powerful admin template, based on Vue3, Vite7, TypeScript, Pinia, NaiveUI and UnoCSS. 一个清新优雅、高颜值且功能强大的后台管理模板，基于最新的前端技术栈，包括 Vue3, Vite7, TypeScript, Pinia, NaiveUI 和 …

Attack Surface Management Platform

Smart contract audit skills roadmap for beginners, auditors, engineers, etc.

Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

Dump cookies and credentials directly from Chrome/Edge process memory

Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.

攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。

A SOCKS 4/5 reverse proxy server

高危漏洞利用工具

Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation from scanners and analysts.

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

This repository contains payload to test NoSQL Injections

Situational Awareness commands implemented using Beacon Object Files

Rules for the Detection Engine in Elastic Security

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.