WeChatOpenDevTool 微信小程序强制开启开发者工具

Cross-platform internet upload/download manager for HTTP(S), FTP(S), SSH, magnet-link, BitTorrent, m3u8, ed2k, and online videos. WebDAV client, FTP client, SSH client.

BurpSuite插件集成Ehole指纹库并进行常见OA弱口令爆破插件

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

this is my tools project ,welcome to start ...

Automated Penetration Testing Agentic Framework Powered by Large Language Models

新一代子域名主/被动收集工具 - Subdomain automatic/passive collection tool

BurpSuite using the document and some extensions

编写 burp suite 插件

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.

ffffffff0x team toolset for penetration testing, cryptography research, CTF and daily use. | ffffffff0x 团队工具集，用来进行渗透测试，密码学研究，CTF和日常使用。

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

A frida tool to dump dex in memory to support security engineers analyzing malware.

The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWA…

分析Macho必备工具

个人数据泄漏检测网站，适用于 QQ / 京东 / 顺丰 / 微博。

《iOS应用逆向与安全》随书源码

Dex to Java decompiler

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

ReflectiveDLL

安卓安全工具，包含jniECB、AES加解密，frida、xposed、root检测

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

PHP代码审计分段讲解

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

Security Conference Archive

Linux privilege escalation auditing tool

Shellcode injector using direct syscalls

D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects

A database of common, interesting or useful commands, in one handy referable form