Automate browser-based workflows with LLMs and Computer Vision

Offline command line lookup utility for GTFOBins (https://github.com/GTFOBins/GTFOBins.github.io), LOLBAS (https://github.com/LOLBAS-Project/LOLBAS), WADComs (https://wadcoms.github.io), and Hijack…

微信小程序辅助渗透-自动化

open source 24/7 screen & voice recording for the age of superintelligence

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD

一款代码审计辅助插件

Bypass LSA protection using the BYODLL technique

some learning notes about Linux Security

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

CTF-NetA是一款专门针对CTF比赛的网络流量分析工具，可以对常见的网络流量进行分析，快速自动获取flag。

将一句话木马隐藏到像素颜色中，生成抗裁剪的PNG图片马

QLExpress is a powerful, lightweight, dynamic language for the Java platform aimed at improving developers’ productivity in different business scenes.

一个想让你测试加密流量像明文一样简单高效的 Burp 插件

Repository for information about 0-days exploited in-the-wild.

eBSploit适用于内网渗透中遇到MS17-010漏洞的情况快速上线公网msf及cs，同时支持自定义dll命令执行、会话迁移等操作。

Godzilla插件|内存马|Suo5内存代理｜jmg for Godzilla

你知道我要说什么

远程调用(rpc)浏览器方法，免去抠代码补环境

浏览器内存漫游解决方案（探索中...）

A simple and modern Java and Kotlin web framework

Arcane - A secure remote desktop application for Windows with the particularity of having a server entirely written in PowerShell and a cross-platform client (Python/QT6).

Java Source Code Obfuscator（java源代码混淆器）

Find, verify, and analyze leaked credentials

一个手动或自动patch shellcode到二进制文件的免杀工具/A tool for manual or automatic patch shellcode into binary file oder to bypass AV.

Advanced SQL Injection Techniques for Bug Bounty Hunters

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

OA漏洞利用工具