This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Python ProxyPool for web spider

dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标

esp32 based device, mainly used for voice chat with large language models

A curated list of GPT agents for cybersecurity

该工具是一个集成了非常多渗透测试工具，类似软件商城的工具可以进行工具下载，工具的更新，工具编写了自动化的安装脚本，不用担心工具跑不起来。

Master programming by recreating your favorite technologies from scratch.

An step by step fuzzing tutorial. A GitHub Security Lab initiative

二进制入门书籍

面向网络安全从业者的知识文库🍃

Meting API for APlayer

一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗

Update Xray1.9.11 Cracked for Windows,Linux and Mac OS.

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.

mTLS-Encrypted Back-Connect SOCKS5 Proxy

Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

Penetration test

WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

A curated list of Awesome Threat Intelligence resources

Cobalt Strike random C2 Profile generator

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Firmware Analysis Tool

信息收集自动化工具

Deserialization payload generator for a variety of .NET formatters

PHP代码审计分段讲解

一个用于处理fsacn输出结果的小脚本（尤其面对大量资产的fscan扫描结果做输出优化，让你打点快人一步！！！）

集Fofa、Hunter鹰图、Shodan、360 quake、Zoomeye 钟馗之眼、censys 为一体的空间测绘gui图形界面化工具，支持一键采集爬取和导出fofa、shodan等数据，方便快捷查看