GoPhantom 是一个为红队演练和安全研究设计的下一代荷载加载器（Payload Loader）生成器。它利用 Go 语言的强大功能，将原始的 Shellcode 和一个诱饵文件打包成一个独立的、具有较强免杀（AV-Evasion）能力的 Windows 可执行文件。

验证码识别 点选 滑块 算术 旋转 OCR

A high-performance algorithmic trading platform and event-driven backtester

SharePoint WebPart Injection Exploit Tool

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

网络质量检测脚本 - Network Quality Check Script

An even funnier way to disable windows defender. (through WSC api)

这个仓库收集了所有在 GitHub 上能找到的 CVE 漏洞利用工具。 This repository collects all CVE exploits found on GitHub.

轻量级，简单易用的Ansible Web管理面板，提供批量主机管理、命令执行、文件传输和Web终端等功能。

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Reverse Engineer's Toolkit

AdaptixFramework Extension Kit

Microsoft Threat Intelligence Security Tools

io_uring based rootkit

Red-Team Linux kernel rootkit

综合后渗透方面的杂烩

🔧 High-performance Python rate limiting library with multiple algorithms (Fixed Window, Sliding Window, Token Bucket, Leaky Bucket & GCRA) and storage backends (Redis, In-Memory).

FC2流出检查器可以分析在fc2.com上发布的视频的公开流出数据，并且附带整合高质量预览图和磁力链接资源，同时自带完善的统计分析功能。

一个在线的微信公众号文章批量下载工具，支持下载阅读量与评论数据，支持私有化部署，通过浏览器进行使用，无需进行安装

Assortment of hashing algorithms used in malware

Attacking the cleanup_module function of a kernel module

ICANN implementation of the Registry Data Access Protocol (RDAP)

Alternative Twitter front-end

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

A self-hosted, privacy-focused publishing platform for autonomous and independent newsrooms.