Starred repositories
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practi…
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
🏎 Nping mean NB Ping, A Ping Tool in Rust with Real-Time Data and Visualizations
A.I.G (AI-Infra-Guard) is a comprehensive, intelligent, and easy-to-use AI Red Teaming platform developed by Tencent Zhuque Lab.
sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！
WEB日志分析查找工具，支持任何文本日志文件的分析(Apache, Nginx)，多关键词查找、关键词排除，轻松处理百万行日志内容，可以很好的分析出CC攻击、嗅探/注入、恶意采集等网络攻击来源
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
Open Source Vulnerability Management Platform
Log4j2 RCE Passive Scanner plugin for BurpSuite
🚀🚀🚀A faster, better and more stable Redis desktop manager [GUI client], compatible with Linux, Windows, Mac.
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens
A visual no-code/code-free web crawler/spider易采集：一个可视化浏览器自动化测试/数据采集/爬虫软件，可以无代码图形化的设计和执行爬虫任务。别名：ServiceWrapper面向Web应用的智能化服务封装系统。
simple script to extract all web resources by means of .SVN folder exposed over network.
A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities
JAVA 漏洞靶场 (Vulnerability Environment For Java)
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
Impacket is a collection of Python classes for working with network protocols.
A tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具