Stars
本仓库用于汇集第三方贡献的 OpenOcta 技能（Skill）资源，便于分享、版本管理与分发。
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率。
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】
一款适用于以APP病毒分析、APP漏洞挖掘、APP开发、HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、鸿蒙)辅助分析工具
网络安全学习wiki，包括Web安全、内网安全、云安全、免杀绕过等（持续更新）
本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.
🥧 HTTPie CLI — modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more.
PoCBox - Vulnerability Test Aid Platform
A collection of scripts which may come in handy during your freedom fighting activities.
Hacking systems with the automation of PasteJacking attacks.
Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
LAVA: Large-scale Automated Vulnerability Addition
Selenium powered Python script to automate searching for vulnerable web apps.
Command-line tool to scan Google search results for vulnerabilities
Fingerprints servers, finds exploits, scans WebDAV. May or may not also make coffee.
IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery
🎯 Fast CORS misconfiguration vulnerabilities scanner