Stars
Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 30/30 tests passed.
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
幽狼AI Shell：首款支持AI渗透的高级WebShell & C2管理工具，内置WebShell MCP服务器，支持多层内网级联的ASPX、ASHX高级WebShell管理工具，AES加密通信，无需代理，内存加载渗透工具，无文件落地隐蔽渗透目标，动态代码执行，ShellCode加载(Metasploit/Cobalt Strike)，反弹Shell，Socks代理，内存马，C2远控,II…
Template-Driven AV/EDR Evasion Framework
Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques.
Rshell是一款开源的golang编写的支持多平台的C2框架，旨在帮助安服人员渗透测试、红蓝对抗。
渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理
Agent for AdaptixC2 with focus in evasion, capability and malleable.
Interesting APT Report Collection And Some Special IOCs
针对于无限debugger场景而编译的Chromium，适用于逆向分析、前端调试对抗、爬虫开发等场景
XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning.
WTF Solidity 极简入门教程，供小白们使用。Now supports English! 官网: https://wtf.academy
A collection of resources to study Solana smart contract security, auditing, and exploits.
Exposing CharmingKitten's malicious activity for IRGC-IO Counterintelligence division (1500)
BillionMail gives you open-source MailServer, NewsLetter, Email Marketing — fully self-hosted, dev-friendly, and free from monthly fees. Join the discord: https://discord.gg/asfXzBUhZr
OpenZeppelin Contracts is a library for secure smart contract development.
🌴Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
cobaltstrike4.5版本破/解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证、修复CVE-2022-39197等
Small and highly portable detection tests based on MITRE's ATT&CK.