A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A natural language interface for computers

CLI platform to experiment with codegen. Precursor to: https://lovable.dev

An open platform for training, serving, and evaluating large language models. Release repo for Vicuna and Chatbot Arena.

Opiniated RAG for integrating GenAI in your apps 🧠 Focus on your product rather than the RAG. Easy integration in existing products with customisation! Any LLM: GPT4, Groq, Llama. Any Vectorstore: …

Langchain-Chatchat（原Langchain-ChatGLM）基于 Langchain 与 ChatGLM, Qwen 与 Llama 等语言模型的 RAG 与 Agent 应用 | Langchain-Chatchat (formerly langchain-ChatGLM), local knowledge based LLM (like ChatGLM, Qwen and…

12306智能刷票，订票

Code and documentation to train Stanford's Alpaca models, and generate the data.

中文独立博客列表

中文LLaMA&Alpaca大语言模型+本地CPU/GPU训练部署 (Chinese LLaMA & Alpaca LLMs)

Impacket is a collection of Python classes for working with network protocols.

Python version of the Playwright testing and automation library.

Exploitation Framework for Embedded Devices

A GPT-empowered penetration testing tool

You Know, For WEB Fuzzing ! 日站用的字典。

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

the LLM vulnerability scanner

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Study Notes For Web Hacking / Web安全学习笔记

Repo for BenTsao [original name: HuaTuo (华驼)], Instruction-tuning Large Language Models with Chinese Medical Knowledge. 本草（原名：华驼）模型仓库，基于中文医学知识的大语言模型指令微调

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

A community-driven way to read and chat with AI bots - powered by chatGPT.

A python script that finds endpoints in JavaScript files

A generative AI extension for JupyterLab

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

Automatic SSRF fuzzer and exploitation tool

Tool for Active Directory Certificate Services enumeration and abuse

Tweets metadata scraper & activity analyzer