Gitreny

glider

glider is a forward proxy with multiple protocols support, and also a dns/dhcp server with ipset management features(like dnsmasq).

JarEditor

IDEA plugin for directly editing and modifying files in jar without decompression. （一款无需解压直接编辑修改jar包内文件的IDEA插件）

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

ratel-core

平头哥的核心代码

XpTest

LSPosed.github.io

strongR-frida-android

An anti detection version frida-server for android.

Loop

Window management made elegant.

GDA-android-reversing-Tool

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

r0capture

安卓应用层抓包通杀脚本

MagiskHidePropsConf

This tool is now dead...

MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

CryptoMagician

A Powerful Encryption Tool Build On Electron

XG_NTAI

用于Webshell木马免杀、流量加密传输，多多支持star

Galaxy

Burp插件，通过hook脚本自动解密报文，让你像测试明文一样简单。A Burp plugin that automatically decrypts messages by hook scirpt, making it as simple as testing plaintext.

ddddocr

带带弟弟 通用验证码识别OCR pypi版

RuishuBypass

瑞数 bypass all

SeaMoon

月海 (Sea Moon) 是一款 FaaS/BaaS 实现的 Serverless 网络工具

warp-yg

warp多功能一键脚本，支持warp-go与wgcf切换，无限生成warp配置文件，支持升级warp+、warp团队账户，查看VPS本地IP、netflix、chatgpt解锁状态

warp-sh

WARP script is move to: https://gitlab.com/fscarmen/warp

inspector

IDEA代码审计辅助插件（深信服深蓝实验室天威战队强力驱动）

ScopeSentry

ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

infosec-abbrv

网络安全缩略语词表速查手册

Hello-Java-Sec

☕️ Java Security，安全编码和代码审计

BlueTeamTools

蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

Z-Godzilla_ekp

哥斯拉webshell管理工具二次开发规避流量检测设备

proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

woodpecker

Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.