A repo to showcase web3 hacks

The ultimate, most advanced, security, DeFi, assembly, web3 auditor course ever created.

A curated list of web3Security materials and resources For Pentesters and Bug Hunters.

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Reverse Tunnels in Go over HTTP/3 and QUIC

An overview of LLMs for cybersecurity.

一款lcx.exe在golang下的实现, 可用于内网穿透, 建立TCP反弹隧道用以绕过防火墙入站限制等, This tool is used to establish reverse tunnel in NAT network environment, it can bypass firewall inbound restriction, support all functions of …

Practice Go programming and implement CobaltStrike's Beacon in Go

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared …

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

前端参数加密渗透测试通用解决方案

List of Awesome Red Teaming Resources

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

内网渗透中的一些工具及项目资料

SecGPT网络安全大模型

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming

An self-improving embodied conversational agent seamlessly integrated into the operating system to automate our daily tasks.

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

✨ Local and Fast AI Assistant. Support: Web | iOS | MacOS | Android | Linux | Windows

Attack Surface Management Platform

An enterprise friendly way of detecting and preventing secrets in code.

阿布量化交易系统(股票，期权，期货，比特币，机器学习) 基于python的开源量化交易，量化投资架构

免费开源A股量化交易数据库； 专注A股，专注量化，向阳而生； 开放、纯净、持续、为Ai(爱)发电。为个人量化交易而生，保卫3000点，珍惜底部机会......【股票数据，股票行情数据，股票量化数据，股票交易数据，k线行情数据，股票概念数据，股票数据接口，行情数据接口，量化交易数据】【多数据源融合，动态设置代理，保障数据高可用性】

reverse websocket with ssl shell using golang.

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。