Library to generate random strings from regular expressions.

Java .class to .cpp converter for use with JNI

A sandbox environment designed for loading, running and profiling a wide range of files, including machine learning models, ELFs, Pickle, Javascript and more

浏览器内存漫游解决方案（探索中...）

Diaphora, the most advanced Free and Open Source program diffing tool.

A Obsidian Plugin. You can flexibility to create a 'Block' by some means. It also provides some useful features, like `list to table`.

Xiaomi Home Integration for Home Assistant

prebuilt binaries for multiple architeture

linux ebpf backdoor demo

Nuitka is a Python compiler written in Python. It's fully compatible with Python 2.6, 2.7, 3.4-3.13. You feed it your Python app, it does a lot of clever things, and spits out an executable or exte…

Custom EXP templates for pwn ctf -- set up things in advance to take the dan flag faster.

A list of Java obfuscators, obfuscated samples and benchmarks.

Java archive implant toolkit.

Manage and switch between multiple proxies quickly & easily.

IDEA Plugin 插件开发可以帮助研发人员提升能效，解决一些实际场景中的共性问题。但最近在折腾IDEA插件开发的时候，市面的资料确实不多，也没有成体系完整的开发指导手册，所以就遇到了很多不知道就不会的事情，需要一点点查询搜索源码、验证API接口，最终把各项功能实现，当然在这个过程中也确实踩了不少坑！接下来在这个专栏会把一些关于 IDEA 插件开发用到的各项知识做成案例输出出来，帮助有需…

A lightweight reverse proxy server that converts TLS traffic to TCP, allowing secure communication between clients and upstream servers.

simple command line tool to copy file into windows clipboard

JVM bytecode obfuscator written in Kotlin

用来将Tai-e改造为开箱即用的静态代码安全分析框架的一些demo

Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()

汇编HTTP请求发送/Assembly Http Request

绕过瑞数waf的动态验证机制，实现请求包重放，理论支持不同网站环境使用，如网页、小程序、APP等。

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application. Also includes a C2 for executing custom Java…

Tunnel all your traffic over Websocket or HTTP2 - Bypass firewalls/DPI - Static binary available

Extract website information from Vue

Burp extension to evade TLS fingerprinting. Bypass WAF, spoof any browser.

Additional resources for leaking and exploiting ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

golang 实现的windows and linux 端口复用工具。

通过端口复用直接进行正向socks5代理（非防火墙分流）

2023白帽补天大会部分代码