An IIS short filename enumeration tool

Curated list of project-based tutorials

fcitx5扩展词库/Rime全局带声调词库，最全声调标注工具链，Rime语法模型：LMDG - Language, Model, Dictionary, Grammar。

一键自动化 下载、安装、激活 Office 的利器。

Rime 配置：雾凇拼音 | 长期维护的简体词库

Swarm Classic: a container clustering system. Not to be confused with Docker Swarm which is at https://github.com/docker/swarmkit

Define and run multi-container applications with Docker

WeChatOpenDevTool 微信小程序强制开启开发者工具

The most exhaustive list of reliable DNS resolvers.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Fast web fuzzer written in Go

ProjectDiscovery's Open Source Tool Manager

Fast and customizable subdomain wordlist generator using DSL

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

A website startup template using the Chirpy theme gem.

Directory/File, DNS and VHost busting tool written in Go

De-clutter a list of URLs

Web path scanner

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

Automatic SSTI detection tool with interactive interface

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

A list of public audit reports conducted by the Cyfrin team

Web3 Security For The Few Who Demand Perfection

AI Crash Course to help busy builders catch up to the public frontier of AI research in 2 weeks

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

一款用于网页敏感信息检测，指纹识别的chrome插件

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

基于chrome、firefox插件的被动式信息泄漏检测工具

无状态子域名爆破工具