The Next Generation of Anti-Rookit(ARK) tool for Windows.

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

Proof-of-Concept tool to authenticate to an LDAP/S server with a certificate through Schannel

通过获取到的webshell流量、url、key来还原攻击者使用webshell所做的操作。

免杀远控木马源码整理开源(银狐 winos 大灰狼 gh0st) Rat

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

mRemoteNG Config File Decrypt

Prompt越狱手册

Java 内存马开聚会 🎉

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时…

Interact with your documents using the power of GPT, 100% privately, no data leaks

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Check your WAF before an attacker does

Python version of the C# tool for "Shadow Credentials" attacks

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Privilege Escalation Enumeration Script for Windows

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

Windows / Linux Local Privilege Escalation Workshop

📚 网安类绝版图书

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A packaged SSH library for switches (huawei,h3c,cisco)

弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保模拟定级、自动化运维、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具、键盘记录器

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Source code for the FAST'19 paper "Fast Erasure Coding for Data Storage: A Comprehensive Study of the Acceleration Techniques", Tianli Zhou and Chao Tian, Texas A&M University

电子工程学院