Command Line Interface for Oracle Cloud Infrastructure

A collection of AWS penetration testing junk

Interesting APT Report Collection And Some Special IOC

The Havoc Framework.

dotnet 反序列化学习笔记

总结了20+.Net反序列化文章，持续更新

基于chrome、firefox插件的被动式信息泄漏检测工具

Jar Analyzer - 一个JAR包分析工具，SCA漏洞分析，批量分析JAR包，方法调用关系搜索，字符串搜索，Spring组件分析，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

A Go-based Exploit Framework

OAExploit一款基于产品的一键扫描工具。

Unlock your displays on your Mac! Flexible HiDPI scaling, XDR/HDR extra brightness, virtual screens, DDC control, extra dimming, PIP/streaming, EDID override and lots more!

Golang terminal dashboard

A powerful little TUI framework 🏗

Tools and Techniques for Red Team / Penetration Testing

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

Interactive prompt for command-line applications

Table-writer and more in golang!

Building powerful interactive prompts in Go, inspired by python-prompt-toolkit.

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

A tool to dump Java serialization streams in a more human readable form.

🤖 The Modern Port Scanner 🤖

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

A tool to abuse Exchange services

Adversary Emulation Framework

sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！

ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

Cyber Security ALL-IN-ONE Platform

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。