Mimikatz implementation in pure Python

The Network Execution Tool

Free, libre, effective, and data-driven wordlists for all!

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

Nmap - the Network Mapper. Github mirror of official SVN repository.

PrestaShop is the universal open-source software platform to build your e-commerce solution.

Portable file server with accelerated resumable uploads, dedup, WebDAV, FTP, TFTP, zeroconf, media indexer, thumbnails++ all in one file, no deps

A Git platform powered by Scala with easy installation, high extensibility & GitHub API compatibility

侦查守卫(observer_ward)Web应用和服务指纹识别工具

Six Degrees of Domain Admin

WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】

0day安全_软件漏洞分析技术

log4j2 rce、poc

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

CTF竞赛权威指南

The C# script compatible shell

OA漏洞利用工具

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

A curated list of GPT agents for cybersecurity

各种无后门大马的整理，有用就点个Star吧~

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]

xia Liao（瞎料）burp插件 用于Windows在线进程/杀软识别 与 web渗透注册时，快速生成需要的资料用来填写，资料包含：姓名、手机号、身份证、统一社会信用代码、组织机构代码、银行卡，以及各类web语言的hello world输出和生成弱口令字典等。

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Takes a list of URLs and returns their HTTP response codes

.NET debugger and assembly editor

密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、批量信息权重查询、密码字典等功能

Struts2全漏洞扫描利用工具

微信收藏的文章

Scrapy+Splash for JavaScript integration