支持大麦网，淘票票、缤玩岛等多个平台，演唱会演出抢票脚本

Community curated list of templates for the nuclei engine to find security vulnerabilities.

渗透测试常规操作记录

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

Bruteforce database

OAExploit一款基于产品的一键扫描工具。

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Web Pentesting Fuzz 字典,一个就够了。

A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM.

🖤 网络安全与渗透测试工具导航

一个全新的敏感文件发现工具

An improved nm + Objective-C & Swift class-dump

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Command-line program to download videos from YouTube.com and other video sites

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Open-Source Phishing Toolkit

List of Awesome Red Teaming Resources

翻译自Miguel Grinberg的blog https://blog.miguelgrinberg.com 的2017年新版The Flask Mega-Tutorial教程

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

🌴Windows exploits提权漏洞合集，附带编译环境，演示GIF图，漏洞详细信息，可执行文件

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

OSS Browser 提供类似windows资源管理器功能。用户可以很方便的浏览文件，上传下载文件，支持断点续传等。

内网渗透工具

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Python - 100天从新手到大师

渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet