AI-Powered Penetration Testing Toolkit

An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.

A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。

The Havoc Framework.

E-mails, subdomains and names Harvester - OSINT

Gather and update all available and newest CVEs with their PoC.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

Single Page Cheatsheet for common MSF Venom One Liners

Commands, snippets, exploits, tools, lists, collections and techniques I used on my journey to becoming an OSCP.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

Attack Surface Management Platform

Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared …

📚 Freely available programming books

ALL IN ONE Hacking Tool For Hackers

Malware samples, analysis exercises and other interesting resources.

Empire is a PowerShell and Python post-exploitation agent.

Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.(项目收录逐步迁移至 https://github.com/knownsec/404StarLink)