一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…

统计路由器CVE，便于漏洞挖掘

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

Fast and customizable vulnerability scanner based on simple YAML based DSL.

A Bypass Anti-virus Software Lateral Movement Command Execution Tool

Impacket is a collection of Python classes for working with network protocols.

谢公子笔记

Enhanced version of secretsdump.py from Impacket. Adds multi-threading and accepts an input file with a list of target hosts for simultaneous secrets extraction.

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！

Xshell Xftp password decrypt

这是一个抓取浏览器密码的工具，后续会添加更多功能

A little tool to play with Windows security

Use ICMLuaUtil to Bypass UAC!

UAC bypass for x64 Windows 7 - 11

A simple and powerful proxy

自己学习java安全的一些总结，主要是安全审计相关

a rep for documenting my study, may be from 0 to 0.1

My experiments in weaponizing Nim (https://nim-lang.org/)

Exploit Development and Reverse Engineering with GDB Made Easy

A repository for learning various heap exploitation techniques.

Adversary Emulation Framework

Cross platform GUI plist editor written in python.