Harmoc

ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Security-PPT

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

WeChat-Data-Analysis

微信聊天记录导出、数据库破解、数据分析 (iPhone & MacBook)

APIKit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

spider-flow

新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。

AwdPwnPatcher

DongTai

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

Taie-Bugbounty-killer

挖掘国内外漏洞平台必备的自动化捡钱赏金技巧，看了并去做了捡钱如喝水。

tag-security

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

DongTai-agent-python

Python Agent is a Python application probe of DongTai IAST, which collects method invocation data during runtime of Python application by dynamic hooks.

DongTai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

BypassSuper

Bypass 403 or 401 or 404

MockingBird

🚀AI拟声: 5秒内克隆您的声音并生成任意语音内容 Clone a voice in 5 seconds to generate arbitrary speech in real-time

Vuln100Topics

知识星球《漏洞百出》最新 20条 Topic

pwnenv

Docker file for pwn env. (ubuntu16.04/18.04/18.10)

CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

fapro

Fake Protocol Server

Beacon.dll

Beacon.dll reverse

xsleaks

A collection of browser-based side channel attack vectors.

365-days-get-xuanwulab-job

Get a job from Xuanwu Lab in 365 days

SharpGPO

A Red Team tool for remotely manipulating Group Policy Object(GPO), Organizational Unit(OU), GPLink and Security Filtering

PySharpSphere

Yet another SharpSphere

Static-Analysis-and-Automated-Code-Audit

静态分析及代码审计自动化相关资料收集

detection-rules

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

codeql

GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.

restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

AUTO-EARN

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

DarkLoadLibrary

LoadLibrary for offensive operations