Stars
该工具用于导出正在运行中的微信进程的 key 并自动解密所有微信数据库文件以及导出 key 后数据库文件离线解密。
Zero shot vulnerability discovery using LLMs
云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等
リアルタイムボイスチェンジャー Realtime Voice Changer
NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications
BlueToolkit is an extensible Bluetooth Classic vulnerability testing framework that helps uncover new and old vulnerabilities in Bluetooth-enabled devices. Could be used in the vulnerability resea…
基于yolov8+孪生网络识别验证码的ICP备案查询程序。从工业和信息化部政务服务平台查询实时数据，高精度过验证码
B站抢票
哔哩哔哩-API收集整理【不断更新中....】
Chrome V8 n-day exploits that I've written.
A New Exploitation Technique for Visual Studio Projects
An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer
Tools and Techniques for Red Team / Penetration Testing
Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles
Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
Run PowerShell command without invoking powershell.exe
This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.
Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE
Proof-of-concept to demonstrate dynamic QR swap phishing attacks in practice.
RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++