Stars
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Windows tool for dumping malware PE files from memory back to disk for analysis.
提权神器，低权限强k安全软件：安全狗，360全家套餐，护卫神，云锁，D盾，卡巴斯基，金山，电脑管家，天网防火墙。
an awesome list of honeypot resources
MSDAT: Microsoft SQL Database Attacking Tool
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
A 8000 high performance offensive security tool for reconnaissance and vulnerability scanning
🙏 Checks Firefox saved passwords against known data leaks using the Have I Been Pwned API.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Implementation of the .NET Profiler DLL hijack in C#
Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which captures HTTP requests towards selectively chosen domains/IP…
Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep…
Universal Dynamic Virtual Channel connector for Remote Desktop Services
SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…
PowerShell rebuilt in C# for Red Teaming purposes
My musings with PowerShell
Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources
PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..