CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

Easy to build a vulnerability trap server . 🦊

一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

java-web 自动化鉴权绕过

Clash Nyanpasu节点分享网站

一款图形化的 .DS_Store文件泄露、.git目录泄露、.svn目录泄露漏洞利用工具。

🔒 越权测试助手 (Privilege Escalation Testing Assistant)

A simple and easy-to-use masturbation management tool

A script that you can run in the background!

针对Navicat的后渗透利用框架

JSFinder go语言二开版本

递归式主动检测脆弱路径的工具

这是一个全面的Web应用安全扫描工具，专注于检测XSS（跨站脚本）漏洞，同时也能够发现其他类型的Web安全漏洞。该工具支持多种扫描模式、不同级别的有效载荷和详细的漏洞报告。

An Open Source YouTube app for privacy

A collection of useful lists for Penetration Testing & Bug Bounty - Content Discovery, Payloads, Variables, Sandbox Escaping, etc

The Ultimate Information Gathering Toolkit

jadx-gui反编译工具二次开发，接入AI赋能。

LazyHunter is an automated reconnaissance tool designed for bug hunters, leveraging Shodan's InternetDB and CVEDB APIs

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by t…

🔍 Search anyone's digital footprint across 300+ websites

Generic Script To Bypass Some AntiFrida Checks

Burp suite 短信轰炸辅助绕过插件

Search & Parse Password Leaks

DTGO (灯塔狩猎者) 是一个用于批量管理和监控资产灯塔系统任务的图形化工具。它能够自动发现灯塔系统、批量提交任务、监控任务状态，并支持导出任务结果。

ARL 灯塔的 WIH 利用

一款基于BurpSuite的被动式shiro检测插件