All Algorithms implemented in Python

Python - 100天从新手到大师

Hunt down social media accounts by username across social networks

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Reverse engineered ChatGPT API

Python ProxyPool for web spider

Impacket is a collection of Python classes for working with network protocols.

Most advanced XSS scanner.

🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

Fast subdomains enumeration tool for penetration testers

An open Apple AirDrop implementation written in Python

Supervisor process control system for Unix (supervisord)

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Main Sigma Rule Repository

OneForAll是一款功能强大的子域收集工具

You Know, For WEB Fuzzing ! 日站用的字典。

The recursive internet scanner for hackers. 🧡

安卓应用层抓包通杀脚本

阅读书源-香色闺阁+阅读3.0书源+源阅读+爱阅书香+千阅+花火阅读+读不舍手+番茄+喜马拉雅+漫画+听书+书源+IPTV源+IPA巨魔应用=自动更新

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…

中文公开聊天语料库

The Leading Security Assessment Framework for Android.

Top disclosed reports from HackerOne

安卓应用安全学习

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

A fast sub domain brute tool for pentesters

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。