javaeasyscanner - 富婆系列，代码审计辅助工具，致力于解放大脑，方便双手

OAExploit一款基于产品的一键扫描工具。

Arweave http client and wallet implemented in go, Arweave SDK

Arweave sponsored Gitcoin bounties.

Browser and Nodejs client for general interaction with the arweave protocol and gateways

The Arweave server and App Developer Toolkit.

Filecoin Full Node Implementation in Go

Filecoin Docs

Quickstart with Fluence, Aqua, and Marine

JS Client to Fluence Network

Marine runs multi-module WebAssembly applications with interface-types and shared-nothing linking scheme

Programming language for distributed systems & p2p

Rust implementation of the Fluence network peer

superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。

一款BurpSuite插件，辅助手工测试

A list for Web Security and Code Audit

冰蝎、哥斯拉 jsp webshell通信流量解密器

Godzilla java Decode,哥斯拉jsp(内存马)流量解密

将安卓远控Apk附加进普通的App中，运行新生成的App时，普通App正常运行，远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote …

c++ fully undetected shellcode launcher ;)

Linux权限维持

evilzip lets you create a zip file(with password) that contains files with directory traversal characters in their embedded path.

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

蓝队利器、溯源反制、NPS 漏洞利用、NPS exp、NPS poc、Burp插件、一键利用

CobaltStrike 上线自动权限维持插件

红队笔记

AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell