Fast web fuzzer written in Go

WebShell Collect

ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er

通达OA漏洞检测工具

Adversary Emulation Framework

Covenant is a collaborative .NET C2 framework for red teamers.

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

zerosum0x0's Koadic

An IIS short filename enumeration tool

Impacket is a collection of Python classes for working with network protocols.

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

利用Tor搭建Socks5代理，动态切换IP

FinallShell 密码解密GUI工具

🔥 CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

Windows TCPIP Finger Command / C2 Channel and Bypassing Security Software

Redis-Rogue-Server Implement

Redis 4.x/5.x RCE

密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（FOFA，Hunter，quake, ZoomEye），指纹识别，敏感信息采集，文件扫描、端口扫描、批量信息权重查询、密码字典等功能

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

Nacos漏洞综合利用GUI工具，集成了默认口令漏洞、SQL注入漏洞、身份认证绕过漏洞、反序列化漏洞的检测及其利用

Nacos 综合利用工具

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

渗透测试中常用油猴脚本

渗透测试常用密码字典合集(持续更新)

实战沉淀字典

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

一款适用于红蓝对抗中的仿真钓鱼系统

Open-Source Phishing Toolkit