A股自动选股程序，实现了海龟交易法则、缠中说禅牛市买点，以及其他若干种技术形态

主要用于隐藏进程真实路径，进程带windows真签名

一个半自动化springboot打点工具，内置目前springboot所有漏洞

"chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability rules, supports decompile, custom rule, and is compatible with …

out-of-tree llvm obfuscation pass plugin (dynamically loadable by rustc). || rust toolchain with obfuscation llvm pass.

LC（List Cloud）是一个多云攻击面资产梳理工具

🚫💾 Run binaries straight from memory in Linux

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

Zerologon exploit with restore DC password automatically

Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

一键提取exe的图标、嵌入图标、资源信息、版本信息、修改时间、数字签名，降低程序熵值

ROP-based sleep obfuscation to evade memory scanners

OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。

A curated list of awesome social engineering resources.

跨平台微信小程序反编译 GUI 工具，.wxapkg 文件扫描 + 解密 + 解包工具

域内自动化信息搜集利用工具

内网域渗透小工具

Pillager是一个适用于后渗透期间的信息收集工具

HW2023中安全厂和超级大厂的大爆炸

红蓝对抗：钓鱼演练资源汇总&备忘录

混合盘APP - 网盘搜索、磁力搜索 - 搜索20个百度网盘、阿里网盘、夸克网盘以及磁力资源

【两万字原创】零基础学fastjson漏洞（提高篇），公众号：追梦信安

Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.

shiro 反序列 命令执行辅助检测工具

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021