saomase

ApiManager

CRAP - 开源API接口管理平台 | 完全开源、免费使用的API接口管理系统、BUG管理系统：API接口管理、文档管理、数据库表管理、接口调试、浏览器调试插件、导出word&pdf接口…..，采用SpringMVC + MyBatis + Lucene + Bootstrap + Angularjs + Iconfont + Guava Cache ，线上使用地址：http://api.crap.cn

AttackDetection

Attack Detection

codimd

CodiMD - Realtime collaborative markdown notes on all platforms.

crawlergo_x_XRAY

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

CVE-2020-1472-EXP

Ladon Moudle CVE-2020-1472 Exploit 域控提权神器

exploitdb

The official Exploit Database repository

FaceMaskDetection

开源人脸口罩检测模型和数据 Detect faces and determine whether people are wearing mask.

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

Hades

Static code auditing system

HFish

Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段

impacket

Impacket is a collection of Python classes for working with network protocols.

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

mimikatz

A little tool to play with Windows security

nali

An offline tool for querying IP geographic information and CDN provider.一个查询IP地理信息和CDN服务提供商的离线终端工具.

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest-tools-bingo

PoC-in-GitHub

📡PoC auto collect from GitHub.

proxypool

自动抓取tg频道、订阅地址、公开互联网上的ss、ssr、vmess、trojan节点信息，聚合去重后提供节点列表，每15分钟更新

raw-packet

Raw-packet Project

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharingan

Sharingan（写轮眼）是一个基于golang的流量录制回放工具，适合项目重构、回归测试等。

SweetPotato

Modifying SweetPotato to support load shellcode and webshell

v2ray-core

A platform for building proxies to bypass network restrictions.

WDScanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。

WeblogicTool

WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xray-crack

xray社区高级版证书生成，仅供学习研究，正常使用请支持正版