保存微信历史版本

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Linux 端使用 Clash 作为代理工具

云存储管理客户端。支持七牛云、腾讯云、青云、阿里云、又拍云，仿文件夹管理、图片预览、拖拽上传、文件夹上传、同步、批量导出URL等功能

一个各类漏洞POC知识库

红方人员作战执行手册

红方人员作战执行手册

若依后台定时任务一键利用

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

内存加载shellcode绕过waf

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

一个全新的敏感文件发现工具

影子用户 克隆

一个全新的敏感文件发现工具

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

A remote access trojan to use against Santa's laptop!

C# shellcode runner adapted to run from a csproj to be triggered by MSBuild

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

Exploit for CVE-2022-27666

Wiki to collect Red Team infrastructure hardening resources

RCE exploit for dompdf

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

HackBar plugin for Burpsuite

PHP反序列化載荷生成工具 PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

安卓应用层抓包通杀脚本

Gitbook

burp插件 ShiroScan 主要用于框架、无dnslog key检测，在大佬的基础上加入shiro>1.2.42(AES GCM)

一款适用于(Android、iOS、WEB、H5、静态网站)，信息检索的工具，可以帮助渗透测试人员快速获取App或者WEB中的有用资产信息。

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

fast scan for redtools