一款适用于红蓝对抗中的仿真钓鱼系统

Lua implementation of the T1K protocol for Chaitin/SafeLine WAF

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Process Explorer driver to kill a process's handles from kerne…

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.

安卓应用安全学习

A list for Spring Security

A list for Web Security and Code Audit

用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等

一款用来扫描oa的漏洞的工具

python3批量poc检测工具

AnyScan

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1100多个poc/exp，长期更新。

Tars is a high-performance RPC framework based on name service and Tars protocol, also integrated administration platform, and implemented hosting-service via flexible schedule.

The security tool(project) Set from github。github安全项目工具集合

一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具

Elder driver Xposed Framework.

The Magic Mask for Android

A Kernel based root solution for Android

LSPosed Framework

响应工信部通报的应用隐私检测——Frida检测APP违规收集信息

深度学习入门教程, 优秀文章, Deep Learning Tutorial

Awesome Books

Let's experience immersive web translation, with bilingual simultaneous display and translation of only the important content. Think of the browser's reading mode, but in immersive translation.

Translate your page in real time using Google or Yandex

沉浸式双语网页翻译扩展 , 支持输入框翻译， 鼠标悬停翻译， PDF, Epub, 字幕文件, TXT 文件翻译 - Immersive Dual Web Page Translation Extension

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)