【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

In-depth attack surface mapping and asset discovery

⚡ Dynamically generated stats for your github readmes

Automatic SQL injection and database takeover tool

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

新一代SKRoot，挑战全网root检测手段，跟面具完全不同思路，摆脱面具被检测的弱点，完美隐藏root功能，实现真正的SELinux 0%触碰，通用性强，通杀所有内核，不需要内核源码，直接patch内核，兼容安卓APP直接JNI调用，稳定、流畅、不闪退。

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

🤖 The Modern Port Scanner 🤖

网络安全类公众号推荐，欢迎大家推荐

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

安全服务集成化工具集

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

📦 Make security testing of K8s, Docker, and Containerd easier.

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals…

Burp插件，快速探测可能存在SQL注入的请求并标记，提高测试效率

Netcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.

Adversary Emulation Framework

Industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

1、点击“检测漏洞”，会自动检测该URL是否存在S2-001、S2-005、S2-009、S2-013、S2-016、S2-019、S2-020/021、S2-032、S2-037、DevMode、S2-045/046、S2-052、S2-048、S2-053、S2-057、S2-061、S2相关log4j2十余种漏洞。 2、“批量验证”，（为防止批量geshell，此功能已经删除，并不再开…

哥斯拉webshell管理工具二次开发规避流量检测设备

一个基于 electron 的音乐软件

中微子代理（内网穿透）

CobaltStrike资源大全

Adversary simulation and Red teaming platform with AI

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入

远程调用(rpc)浏览器方法，免去抠代码补环境

Ghidra is a software reverse engineering (SRE) framework

Weekly Go Online Meetup via Bilibili｜Go 夜读｜通过 bilibili 在线直播的方式分享 Go 相关的技术话题，每天大家在微信/telegram/Slack 上及时沟通交流编程技术话题。