Lists (1)
Stars
Use the GCP testIamPermissions functionality to bruteforce and discover your permissions
All the deals for InfoSec related software/tools this Black Friday
红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具
Fast, collaborative live terminal sharing over the web
Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.
Nosey Parker is a command-line program that finds secrets and sensitive information in textual data and Git history.
a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
Run your own AI cluster at home with everyday devices 📱💻 🖥️⌚
Go shellcode loader that combines multiple evasion techniques
A terminal workspace with batteries included
A community-supported supercharged version of paperless: scan, index and archive all your physical documents
LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. This project gathers procedural examples from public reports …
Infection Monkey - An open-source adversary emulation platform
React Flow | Svelte Flow - Powerful open source libraries for building node-based UIs with React (https://reactflow.dev) or Svelte (https://svelteflow.dev). Ready out-of-the-box and infinitely cust…
🔍 gowitness - a golang, web screenshot utility using Chrome Headless
A library for building fast, reliable and evolvable network services.
An animated number component for React, Vue, and Svelte.
Deep Linux runtime visibility meets Wireshark
UI Library for Design Engineers. Animated components and effects you can copy and paste into your apps. Free. Open Source.
Various public documents, whitepapers and articles about APT campaigns
🐜🐜🐜 ants is the most powerful and reliable pooling solution for Go.
Interesting APT Report Collection And Some Special IOC
E²VA short for Exploitation Experience with Vulnerable App is a vulnerable app to learn userspace exploitation on Android
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Various tips & tricks
A streamlined tool for discovering private TLDs for security research.
An extremely fast Python package and project manager, written in Rust.