NikolaGareth

quill

Quill is a modern WYSIWYG editor built for compatibility and extensibility.

RSSHub

🧡 Everything is RSSible

harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

lens

Lens - The way the world runs Kubernetes

kubevela

The Modern Application Platform.

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

Elkeid

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practices.

coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

HummerRisk

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

WeblogicTool

WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

w5

Security Orchestration, Automation and Response (SOAR) Platform. 安全编排与自动化响应平台，无需编写代码的安全自动化，使用 SOAR 可以让团队工作更加高效

GoWxDump

SharpWxDump的Go语言版。微信客户端取证，获取信息(微信号、手机号、昵称)，微信聊天记录分析(Top N聊天的人、统计聊天最频繁的好友排行、关键词列表搜索等)

VcenterKiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

AutoTS

Automated Time Series Forecasting

neuvector

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

CS-Remote-OPs-BOF

uuWAF

A industry-leading free, high-performance, AI and semantic technology web application and API security protection product - uuWAF. 一款工业级免费、高性能、高扩展，支持AI和语义引擎的Web应用和API安全防护产品-南墙。Web应用防火墙、WAF、WAAP

Erfrp

Erfrp-frp二开-免杀与隐藏

GPTSecurity

塑造未来的安全领域智能革命

SharpWSUS

CS-AutoPostChain

基于 OPSEC 的 CobaltStrike 后渗透自动化链

mqtt-pwn

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

oss-stinger

利用oss实现http转发/cobalt strike上线

zipbomb-generator

A simple zipbomb generator 压缩包炸弹生成器

FishUpgrade

macOS 摸鱼模拟器

Elkeid-HUB

Elkeid HUB is a rule/event processing engine maintained by the Elkeid Team that supports streaming/offline (not yet supported by the community edition) data processing. The original intention is to solve complex data/event processing and external system linkage requirements through standardized rules.

poc_exploits

🕳️ Proof of Concept exploits and their descriptions for various products

burp-scripts

各种burp-clj脚本