Starred repositories
ASC is a super FAST and lightweight Android decompiler designed for Agents/Mobile Researchers.
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
PingCastle - Get Active Directory Security at 80% in 20% of the time
Say goodbye to the complex, verbose, and laggy interaction mode of IDA Pro MCP
WireTapper is a wireless OSINT tool that passively detects and maps Wi-Fi, Bluetooth, CCTV cameras, vehicles, headphones, TVs, IoT devices, and cell towers, turning nearby radio signals into clear …
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
获取微信4.0版本以上数据库密钥和图片密钥的工具 | A tool for obtaining database keys and image keys for WeChat versions 4.0 and above
EchoTrace 是一个本地、安全的微信聊天记录导出、分析与年度报告生成工具 | EchoTrace is a local, secure tool for exporting, analyzing, and generating annual reports of WeChat chat records
Local-first chat history analyzer with AI. | 本地优先的 AI 聊天记录分析工具
Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.
Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practi…
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
🏎 Nping mean NB Ping, A Ping Tool in Rust with Real-Time Data and Visualizations
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
sqlmap Xplus 基于 sqlmap，对经典的数据库注入漏洞利用工具进行二开！
WEB日志分析查找工具，支持任何文本日志文件的分析(Apache, Nginx)，多关键词查找、关键词排除，轻松处理百万行日志内容，可以很好的分析出CC攻击、嗅探/注入、恶意采集等网络攻击来源
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
Log4j2 RCE Passive Scanner plugin for BurpSuite
🚀🚀🚀A faster, better and more stable Redis desktop manager [GUI client], compatible with Linux, Windows, Mac.