A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

Wiki to collect Red Team infrastructure hardening resources

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Coba…

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Security & Development

Golang for Security Professionals

Hacker tools on Go (Golang)

Red-Team-Notes

代码审计相关的一些知识

Cobalt Strike系列

Python for Windows (pywin32) Extensions

Veil Evasion is no longer supported, use Veil 3.0!

Unified repository for different Metasploit Framework payloads

Metasploit Framework

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

NodeJS Red-Team Cheat Sheet

OneForAll是一款功能强大的子域收集工具

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

Enumeration sub domains(枚举子域名)

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called A…

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called A…

Top disclosed reports from HackerOne