原汁原昧 Claude Code 可运行,可构建, 可调试版; Typescript 类型全修复; 企业级可靠性; 安全无毒, lock 文件保真, 可直接 bun i; bun run dev 启动

DeerFlow is a community-driven Deep Research framework, combining language models with tools like web search, crawling, and Python execution, while contributing back to the open-source community.

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It is derived from ByteDance's internal best practi…

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

CT Log Scanner

Solve Google reCAPTCHA in less than 5 seconds! 🚀

The repo contains a series of challenges for learning Frida for Android Exploitation.

nginx module for SSL/TLS ja3 fingerprint.

ElastAlert 2 is a continuation of the original yelp/elastalert project. Pull requests are appreciated!

TCP IP伪造,建议使用 ubuntu 22.04

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

SoftVC VITS Singing Voice Conversion

sd-evil-scrpits

OnionScan is a free and open source tool for investigating the Dark Web.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。

YApi 是一个可本地部署的、打通前后端及QA的、可视化的接口管理平台

Tai-e assignments for static program analysis

[WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...

docker container escape check || Docker 容器逃逸检测

个人使用CodeQL编写的一些规则

新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。

Static Code Analysis

记录各语言、框架中危险的sink，个人代码审计、漏洞研究使用。