渗透测试 / 漏洞

安全方向的链接索引仓库，用来替代你自己收藏夹里那堆散落的书签

带模式语言的十六进制编辑器，用脚本描述二进制结构并实时高亮，替代 010 Editor 的模板机制

Windows 用户态逆向的动态调试主力，顶替 OllyDbg 和 WinDbg 在恶意样本手工分析里的位置

自托管的多智能体渗透测试执行器，把自然语言目标翻译成沙箱里的 nmap/Metasploit 调用链

在装 Claude Code / Codex / MCP skill 之前先扫一遍，把不可信的第三方 skill 挡在供应链入口

先用它几秒扫完 65k 端口，再把开放端口交给 Nmap 做深入分析，替代 nmap 全端口扫描的慢速阶段

一份按主题索引的渗透测试与红队学习资源清单，用来替代你自己攒的浏览器书签夹

在日志侧做行为检测、把封禁决策下发给防火墙或 CDN 的开源 IDS/IPS，顶替 Fail2Ban 加自建 IP 黑名单

多架构汇编与恶意软件逆向的免费课程仓库，顶替零散博客和付费入门课

把 150+ 渗透工具包装成 MCP 工具集，让 LLM 代理直接调用，替代手写工具编排脚本

移动 App 安全测试的规范索引，把 MASVS 控制项翻译成可执行的验证步骤和逆向操作

用单个 Go 二进制替代 Burp Suite Pro 做 HTTP 拦截与重放，省掉 JVM 和授权费

基于 NGINX 的反向代理型 WAF，用来替掉手写 nginx 安全配置和零散 ModSecurity 规则

给 GDB/LLDB 补上逆向和 pwn 调试缺的那层命令与视图，替代 PEDA/GEF 这类单文件脚本

把子域枚举、爬虫、邮箱收集串成递归流水线的侦察引擎，顶替手工拼 amass+httpx+自定义脚本的胶水层

Go 项目里替代手工 grep 危险调用的静态检查器，挂在 CI 上卡住注入和弱加密

给裸 GDB 套一层上下文视图和架构抽象，pwn 与逆向调试时替代手敲 x/i、vmmap、checksec 的重复劳动

不启动 Rails 应用就能扫出安全漏洞的静态分析器，CI 里替代人工安全 review 的第一道闸

在 CI 流水线里静态扫描 GitHub Actions 工作流，把模板注入和权限过宽挡在合并之前

Python 里做 APK 静态分析的底层库，顶替 apktool 加手工解析 dex 的那一层

开源红队对抗模拟平台，用 LLM Agent 编排后渗透流程，顶替 Cobalt Strike 的授权测试场景

用 TUN 接口替代 SOCKS 代理做内网穿透，让扫描器和工具直接看到对端网络

A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Cybersecurity oriented awesome list

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.

Reconstruct and validate C/C++ code from compiled programs with AI.

ChatGPT Plus/Team/Pro 订阅协议端到端重放工具集 · hCaptcha 视觉求解器 · 反欺诈机制实证研究 / End-to-end protocol replay toolkit for ChatGPT Plus/Team/Pro subscription with from-scratch hCaptcha solver and empirical anti-fraud research

A secure low code deception runtime framework, leveraging AI for System Virtualization.

Free email OSINT tool, 5000+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess

DarkFlare Firewall Piercing (TCP over CDN)

A curated collection of top-tier penetration testing tools and productivity utilities across multiple domains. Join us to explore, contribute, and enhance your hacking toolkit!

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

Multiplayer pivoting solution

Copy links from the sharing menu with automatic removal of shorteners and trackers.

AI-powered offensive security testing using autonomous agents, directly in your terminal.

A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.

Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds

Secure Wireless Data-Transfer over BLE and USB for Passwords, Pentesting and Media Control.