Universal skills loader for AI coding agents - npm i -g openskills

通过websocket在IIS8(Windows Server 2012)以上实现socks5代理

A Model Context Protocol (MCP) server that provides stateful, interactive terminal access.

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

jolokia-exploitation-toolkit

Fastjson + MySQL 条件下不出网利用测试环境

UltraRAG v2: A Low-Code MCP Framework for Building Complex and Innovative RAG Pipelines

腾讯云黑客松 - 智能渗透挑战赛 Top9

服务器监控

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

TCP/HTTP/UDP/QUIC client/server with Reactor over Netty

Nacos 综合漏洞利用工具

IntelliJ IDEA plugin for static code analysis powered by Joern.

金刚狼：首款支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，ShellCode加载(Metasploit/Cobalt Strike)，反弹Shell，Socks代理，内存马

阿里巴巴安全SDK，提供SSRF、JDBC、XXE防护能力

The source code of [S&P'25] Detecting Taint-Style Vulnerabilities in Microservice-Structured Web Applications.

ASP.net ViewState密钥被动扫描爆破BurpSuite插件

7z exploit POC versions prior to 25.01

【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安

Decrypt HTTPS/TLS connections on the fly with Wireshark

Tencent Kona is a no-cost, production-ready distribution of the Open Java Development Kit (OpenJDK), Long-term support(LTS) with quarterly updates. Tencent Kona serves as the default JDK internally…

JVM heap dump analyzer

The first Computer Emergency Response (ARK) Tools for young people ;) 　　　　　　　　　　　　　　　　　　　　　　年轻人的第一款应急响应(ARK)工具 ；）

MX1014 is a flexible, lightweight and fast port scanner.

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入

利用AI大模型，一键生成高清短视频 Generate short videos with one click using AI LLM.

《Linux提权方法论》