Stars
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
SpringCore0day from https://share.vx-underground.org/ & some additional links
🔧 Electron based open source toolbox, free integration of rich plug-ins. 基于 electron 的开源工具箱，自由集成丰富插件。
Impacket is a collection of Python classes for working with network protocols.
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
Stealing Signatures and Making One Invalid Signature at a Time
Local Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527
Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
KunLun-M — Open-source static code analysis for PHP, Nodejs/JavaScript, Python, Golang, Java and C/C++, with AST-based semantic scanning and one-click AI Agent integration (OpenClaw, Codex, Claude …
🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.
Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)
Community curated list of templates for the nuclei engine to find security vulnerabilities.
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
ScareCrow - Payload creation framework designed around EDR bypass.