OneForAll是一款功能强大的子域收集工具

C/C++ source obfuscator for antivirus bypass

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

安卓应用层抓包通杀脚本

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

Sharingan（写轮眼）是一个基于golang的流量录制回放工具，适合项目重构、回归测试等。

The project is based on Ben Clark's book: Red Team Field Manual.

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world.…

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…

github泄露扫描系统

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Parser to process monitor file formats

A list of cloud ranges from different providers.

A wordlist of API names for web application assessments

.NET deobfuscator and unpacker.

CAPTCHA22 is a toolset for building, and training, CAPTCHA cracking models using neural networks.

Payload Generation Framework

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

collect for learning cases

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

Never use print for debugging again

A graph-based tool for visualizing effective access and resource relationships in AWS environments.

A crack solution for GPGMail of 2019.1

The Harvest of V8 regress.

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Using f-strings(PEP 498) style literal string interpolation without Python 3.6.

Selenium Hub successor running browsers within containers. Scalable, immutable, self hosted Selenium-Grid on any platform with single binary.

share experience towards for information management, brainstorming and so on.