Lists (29)
Sort Name ascending (A-Z)
AD域渗透
Android渗透
BurpSuite插件
C2框架+免杀
C2框架、后门相关学习资料Chrome插件
CobaltStrike插件
IMOO破解
小天才产品破解IOT渗透
IR应急响应
K8s+云服务渗透
LLM安全
Magisk模块
Payload+账号密码字典
POC+EXP集合
RootKit权限维持
权限维持Scan指纹+漏洞
SOC安全运营
安全防御、安全监控、基线检测SSDLC研发安全
研发过程安全工具vCenter渗透
VPN+代理隧道
Webshell管理
Web漏洞利用
Wx小程序渗透
微信小程序渗透工具Xposed模块
基础运维
学习资料
日常办公
本地提权
社会工程学
Stars
Distributed reliable key-value store for the most critical data of a distributed system
🔥 1Panel offers an intuitive web interface for Linux server, making it easy to manage OpenClaw agents, LLMs, websites, databases, containers, files, and scheduled tasks.
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
🌩「自选优选 IP」测试 Cloudflare CDN 延迟和速度,获取最快 IP !当然也支持其他 CDN / 多个解析 IP 的网站 ~
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
In-depth attack surface mapping and asset discovery
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
Monitor linux processes without root permissions
自动化反编译微信小程序,小程序安全评估工具,发现小程序安全问题,自动解密,解包,可还原工程目录,支持Hook,小程序修改
Cameradar hacks its way into RTSP videosurveillance cameras
📦 Make security testing of K8s, Docker, and Containerd easier.
Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。支持协议1200+,协议指纹10000+,应用指纹20000+,暴力破解协议10余种。
一款基于各大企业信息API的工具,解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)
A tool to perform Kerberos pre-auth bruteforcing
ScareCrow - Payload creation framework designed around EDR bypass.
✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的,网页UI、跨平台以及多功能的远程控制和监控工具,你可以随时…
dddd是一款使用简单的批量信息收集,供应链漏洞探测工具,旨在优化红队工作流,减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标
一个高价值漏洞采集与推送服务 | Collect valueable vulnerabilities and push them to various services
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全,具备专业的软件成分分析(SCA)、漏洞检测、专业漏洞库。