Next Generation C2 Framework, IoM-server/client

proxy/tunnel everything for red team!

Impacket is a collection of Python classes for working with network protocols.

A repo to showcase web3 hacks

Solidity Static Analyzer that easily integrates into your editor

Static Analyzer for Solidity and Vyper

Update by evilcos, for DarkHandBook.io

ParamScan is a chrome extension for finding reflected parameters in a webpage.

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

smbclient-ng, a fast and user friendly way to interact with SMB shares.

BrowserSnatch is a powerful browser stealer or browser data extraction tool intended to be used for ethical hacking or penetration testing.

Knowledge Base 慢雾安全团队知识库

The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.

攻防演练过程中，我们通常会用浏览器访问一些资产，但很多未授权/敏感信息/越权隐匿在已访问接口过html、JS文件等，该插件能让我们发现未授权/敏感信息/越权/登陆接口等。

An elegant and powerful admin template, based on the latest front-end technology stack, including Vue3, Vite5, TypeScript, Pinia, AntDesignVue and UnoCSS. 一个优雅且功能强大的后台管理模板，基于最新的前端技术栈，包括 Vue3, Vite5…

通用的vite-react后台项目，基于vite5-react18-router6-ts-mobx-antd5-proComponent

互联网资产综合扫描/攻击面测绘

Basic C2 Server

对权限绕过自动化bypass的burpsuite插件

Rewritten by golang

LC（List Cloud）是一个多云攻击面资产梳理工具

Command line interface for ORE cryptocurrency mining.

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript

A library for building fast, reliable and evolvable network services.

RustRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Rust 🦀

Brew Local Privilege Escalation exploit on Intel macOS

This project aims to compare and evaluate the telemetry of various EDR products.

一款打供应商必备的代码获取工具