Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent, VSCode Agent, Dia Browser, Xcode, Trae AI, Cluely & Orchids.app (And other Open Sourced) System Prompts, Tools & AI M…

A responsive web-based UI that provides an intuitive interface for Google's Gemini CLI, enabling AI-assisted coding from any device. Features include interactive chat, integrated terminal, file exp…

An open-source AI agent that brings the power of Gemini directly into your terminal.

The EXCLUSIVE Collection of 50,000+ Nuclei templates based on Wordfence intel. Daily updates for bulletproof WordPress security.

MailFail identifies and provides commands to exploit a large number of email-related misconfigurations for the current domain and subdomain. The extensions UI popup highlights any misconfigurations…

Create a Shellcode Dropper from any Windows Module

NukeAMSI is a powerful tool designed to neutralize the Antimalware Scan Interface (AMSI) in Windows environments.

Injectra is a Python-based tool for injecting custom payloads into various file types using their magic numbers. It supports file types like zip, rar, docx, jpg, and more, allowing for customizable…

ZigStrike, a powerful Payload Delivery Pipeline developed in Zig, offering a variety of injection techniques and anti-sandbox features.

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

StoneKeeper C2, an experimental EDR evasion framework for research purposes

微信收藏的文章

Spoof file icons and extensions in Windows

AI Chatbots in terminal without needing API keys

HookChain: A new perspective for Bypassing EDR Solutions

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

The swiss army knife of LSASS dumping

Offensive Powershell obfuscator

Threadless Process Injection using remote function hooking.

Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8

Payload Generation Framework

🐸💬 - a deep learning toolkit for Text-to-Speech, battle-tested in research and production

Automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify expl…

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Covenant is a collaborative .NET C2 framework for red teamers.

WP-Auto is a tools for upload themes, plugin & file from wpfilemanager from xmlrpc brute force result