Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

Impacket is a collection of Python classes for working with network protocols.

You Know, For WEB Fuzzing !

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

A `.git` folder disclosure exploit

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

A collection of custom security tools for quick needs.

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

MS17-010

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-32…

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

Redis 4.x/5.x RCE

一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo

Tomcat-Ajp协议文件读取漏洞

Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。

Decode All Bases - Base Scheme Decoder

Mastering Machine Learning for Penetration Testing, published by Packt

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.

PC微信小程序 wxapkg 解密

Exploit management framework

HTTP.ninja

Find the host network card address through OXID Resolver

零组小工具