OpenAI-compatible proxy that stacks the free tiers of 28 LLM providers (~4B tokens/month) behind one /v1 endpoint — plus any custom OpenAI-compatible endpoint. Smart routing, automatic failover, en…

The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.

Bulk scanning + one-click vulnerability exploitation

一款用于网页敏感信息检测，指纹识别的chrome插件

这是一个用于Burp Suite的文件上传漏洞自动化fuzz测试插件。该插件提供了多种绕过技术，包括WAF绕过、内容类型绕过、文件扩展名绕过等。

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

若依4.8.0后台RCE

DudeSuite Web Security Tools

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

从内存中提取浏览器和Todesk用户凭证

Exploit for CVE-2025-30406

D-Link NAS CVE-2024-3273 Exploit Tool

PoC for CVE-2025-22457 - A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways

POC for CVE-2023-4220 - Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

突发奇想-针对NetCut.CN网络剪切板的爆破和持续监控

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Open-Source Phishing Toolkit

Albanian Hacking Tool!! Tools to help you with ethical hacking, Social media hack, phone info, Gmail attack, phone number attack, user discovery, Anonymous-sms, Webcam Hack • Powerful DDOS attack t…

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1000多个poc/exp，长期更新。

POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量

In-depth attack surface mapping and asset discovery

一款OutLook信息收集工具

75k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒

YApi Mock 远程代码执行漏洞利用工具

图形化漏洞利用Demo-JavaFX版

My own OSCP guide