aptkid

harbor

An open source trusted cloud native registry project that stores, signs, and scans content.

rancher

Complete container management platform

emqx

The most scalable open-source MQTT broker for IoT, IIoT, and connected vehicles

katana

A next-generation crawling and spidering framework.

LogicFlow

A flow chart editing framework focusing on business customization. 专注于业务自定义的流程图编辑框架，支持实现脑图、ER图、UML、工作流等各种图编辑场景。

osmedeus

A Workflow Engine for Offensive Security

KubeOperator

KubeOperator 是一个开源的轻量级 Kubernetes 发行版，专注于帮助企业规划、部署和运营生产级别的 K8s 集群。

manticore

Symbolic execution tool

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

docker-easyconnect

使深信服（Sangfor）开发的非自由的 VPN 软件 EasyConnect 和 aTrust 运行在 docker 或 podman 中，并作为网关和/或提供 socks5、http 代理服务

PL-Compiler-Resource

程序语言与编译技术相关资料（持续更新中）

pwn_jenkins

Notes about attacking Jenkins servers

appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

CVE-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

JNDI-Exploit-Kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

Log4j2Scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

Pluto-Obfuscator

Obfuscator based on LLVM 12.0.1

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information.

awesome-rl-for-cybersecurity

A curated list of resources dedicated to reinforcement learning applied to cyber security.

JNDI-Injection-Exploit-Plus

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

overlord

Overlord - Red Teaming Infrastructure Automation

K8s-Mind-Map

K8S安全攻防思维导图 | Docker安全攻防思维导图

StreamDivert

Redirecting (specific) TCP, UDP and ICMP traffic to another destination.

oss-stinger

利用oss实现http转发/cobalt strike上线

Bundler-bypass

免杀捆绑器，过主流杀软。A Bundler bypass anti-virus

SharpUserIP

获取服务器或域控登录日志

GodzillaMemoryShellProject

SeeProxy

Golang reverse proxy with CobaltStrike malleable profile validation.