Linux权限维持

免杀与恶意软件开发

CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。

OpenMMLab Self-Supervised Learning Toolbox and Benchmark

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

针对CTF线下赛的通用WAF，日志审计功能。

Reverse engineered ChatGPT API

Implementation of Denoising Diffusion Probabilistic Model in Pytorch

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Tired of looking at hex all day and popping '\x41's? Rather look at Lugia/Charmander? I have the solution for you.

CVE-2021-3156非交互式执行命令

Resend and mass-utilize common packets in burpsuite and packets in wireshark. Commonly used for AWD competitions, bulk attacks using other people's packets.

文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

A powerful PHP WAF for AWD

PINC (Plant Non-Coding Recognition Tool) is a powerful tool for identifying non-coding RNAs by analyzing k-mer frequency, cds, sequence length and GC content through sequence intrinsic composition …

👻Stowaway -- Multi-hop Proxy Tool for pentesters

面向网络安全从业者的知识文库🍃

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Fantastic toolkit for CTFers and everyone.

🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

Pre-Built Vulnerable Environments Based on Docker-Compose

利用白名单文件 cdb.exe 执行 shellcode

A list of useful Powershell scripts with 100% AV bypass (At the time of publication).

Xray、Tuic、hysteria2、sing-box 八合一一键脚本

Stealing Signatures and Making One Invalid Signature at a Time

免杀姿势学习、记录、复现。

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计