Network reconnaissance and asset discovery tool

侦查守卫(ObserverWard)的指纹库

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

Malware Configuration And Payload Extraction

Yet another Ransomware gang tracker

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

Fastjson姿势技巧集合

Proof of Concept (PoC) CVE-2021-4034

可过D盾、安全狗

Adversary Emulation Framework

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

参数 | 字典 collections

ADB Usage Complete / ADB 用法大全

安卓应用层抓包通杀脚本

a fast domain brute tool

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

SRC子域名资产监控

Support ALL Windows Version

Web shells for use in penetration testing

OneForAll是一款功能强大的子域收集工具

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

Struts2全漏洞扫描利用工具

一个基于SpringBoot开发的个人博客。集成了：博客前台，后台管理。

Cobalt Strike系列

TypeScript AST query library

burp插件开发指南

Server-Side Template Injection and Code Injection Detection and Exploitation Tool