Stars
A tool to dump Java serialization streams in a more human readable form.
🍒 Cherry Studio is a desktop client that supports for multiple LLM providers.
一款后渗透免杀工具，助力每一位像我这样的脚本小子快速实现免杀，支持bypass AV/EDR 360 火绒 Windows Defender Shellcode Loader
RVScan 是一个功能强大的 Burp Suite 扩展插件，专为自动化Web应用程序安全测试和漏洞扫描而设计。它提供全面的路径发现、绕过技术、EHole指纹识别和可定制的扫描规则。
MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize
Nacos漏洞综合利用GUI工具，集成了默认口令漏洞、SQL注入漏洞、身份认证绕过漏洞、反序列化漏洞的检测及其利用
go语言封装的各种对称加密和非对称加密，可以直接使用，包括3重DES，AES的CBC和CTR模式，还有RSA非对称加密,ECC椭圆曲线的加密和数字签名
Alternative Shellcode Execution Via Callbacks
shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软
Java Source Code Obfuscator（java源代码混淆器）
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Smart contract audit skills roadmap for beginners, auditors, engineers, etc.
一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。支持MCP接入
To learn common smart contract vulnerabilities using Foundry!
Vulhub Vulnerability Reproduction Designated Platform
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.
为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.