C2 redirector base on caddy

提取域控日志，支持远程提取

该工具用于导出正在运行中的微信进程的 key 并自动解密所有微信数据库文件以及导出 key 后数据库文件离线解密。

library for importing functions from dlls in a hidden, reverse engineer unfriendly way

每日自动收集全网可用 Nuclei POC

WeChatOpenDevTool 微信小程序强制开启开发者工具

微信小程序反编译工具，.wxapkg 文件扫描 + 解密 + 解包工具

一键生成免杀木马

awesome llvm security [Welcome to PR]

PE to shellcode

强大的敏感信息搜索工具

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具

a rep for documenting my study, may be from 0 to 0.1

Confluence未授权添加管理员用户漏洞利用脚本

一个垃圾利用工具，半自动发包机器

Cobalt Strike is a post-exploitation framework designed to be extended and customized by the user community. Several excellent tools and scripts have been written and published, but they can be cha…

xp_CAPTCHA(瞎跑 白嫖版) burp 验证码 识别 burp插件

A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Venom - A Multi-hop Proxy for Penetration Testers

HeapDump敏感信息提取工具

Trying to tame the three-headed dog.

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

Webpack自动化信息收集