📖 从 0 到 1，系统化学习 Android 逆向，让学习变得有趣、好玩、易上手！

proguard resource for Android by wechat team

Powerful android apk editor - aapt/aapt2 independent

Credits to evildog1 for developing this awesome tool

短信转发器——监控Android手机短信、来电、APP通知，并根据指定规则转发到其他手机：钉钉群自定义机器人、钉钉企业内机器人、企业微信群机器人、飞书机器人、企业微信应用消息、邮箱、bark、webhook、Telegram机器人、Server酱、PushPlus、手机短信等。包括主动控制服务端与客户端，让你轻松远程发短信、查短信、查通话、查话簿、查电量等。（V3.0 新增）PS.这个APK…

Linux权限维持

a little tool help CTFer solve RSA problem

持续收集更新全网最全最有趣的Telegram机器人🤖大全，相信总有你需要的一款机器人~

P1finger - 红队行动下的重点资产指纹识别工具，解决信息收集过程中的一小步

利用 NTLMSSP 探测 Windows 信息

一款提示词优化器，助力于编写高质量的提示词

内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描

A library for detecting known secrets across many web frameworks

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

An open-source, free protector for .NET applications

Papermark is the open-source DocSend alternative with built-in analytics and custom domains.

Dump cookies and credentials directly from Chrome/Edge process memory

Connect like there is no firewall. Securely.

Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

project-blacklist3r

⬆️ ☠️ 🔥 Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

kunwu是新一代webshell检测引擎，使用了内置了模糊规则、污点分析模拟执行、机器学习三种高效的检测策略

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

一些在线的工具,情报资源

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

批量网站备份文件扫描器，增加文件规则，优化内存占用

Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322

PrintNotifyPotato