Em7pyCc

antSword

AntSword is a cross-platform website management toolkit.

cloudflare-ddns

Simple, free dynamic DNS via Cloudflare

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Netch

Game accelerator. Support Socks5, Shadowsocks, ShadowsocksR, V2Ray, Trojan proxies. UDP NAT FullCone

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

web3.php

A php interface for interacting with the Ethereum blockchain and ecosystem. Native ABI parsing and smart contract interactions.

AngelSword

Python3编写的CMS漏洞检测框架

ant

实时上线的 XSS 盲打平台

apkleaks

Scanning APK file for URIs, endpoints & secrets.

AwesomeXSS

Awesome XSS stuff

Cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

clashX

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

copagent

java memory web shell extracting tool

dic

kubesphere

Enterprise-grade container platform tailored for multicloud and multi-cluster management

linux-exploit-suggester

Linux privilege escalation auditing tool

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

Medusa

:cat2:Medusa是一个红队武器库平台，目前包括扫描功能(200+个漏洞)、XSS平台、协同平台、CVE监控等功能，持续开发中 http://medusa.ascotbe.com

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

passive-scan-client

Burp被动扫描流量转发插件

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Photon

Incredibly fast crawler designed for OSINT.

PowerSploit

PowerSploit - A PowerShell Post-Exploitation Framework

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

teler

Real-time HTTP Intrusion Detection

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

wyy-action

网易云音乐自动签到 + 刷歌

XSStrike

Most advanced XSS scanner.