一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

In-depth attack surface mapping and asset discovery

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

A vulnerability scanner for container images and filesystems

The Havoc Framework

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

A Linux/Windows C2 framework made by a Linux user

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

🔨 A modern multiple reverse shell sessions manager written in go

Obfuscate Go binaries and packages

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

Quietly and anonymously bruteforce Active Directory usernames at insane speeds from Domain Controllers by (ab)using LDAP Ping requests (cLDAP)

Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency

Redis 漏洞利用工具

A utility to detect various technology for a given IP address.

A tool for IDN homograph attacks and detection.

Standalone utility for service discovery on open ports!

LC（List Cloud）是一个多云攻击面资产梳理工具

互联网资产综合扫描/攻击面测绘

用友漏洞检测，持续更新漏洞检测模块

本项目是一个远程控制应用，使用 Golang 开发，允许用户通过 Web 界面远程控制和屏幕监控其他计算机。主要功能包括屏幕共享、鼠标和键盘控制以及键盘记录。

域信息收集工具

Next Generation C2 Framework, IoM-server/client

proxy/tunnel everything for red team!

A tool to detect CDN for given domains

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

Minecraft Honeypot for Log4j exploit. CVE-2021-44228 Log4Shell LogJam

[windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)