0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

aboutsecurity

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

apt_t00ls

高危漏洞利用工具

arl-finger-add

灯塔（最新版）指纹添加脚本！

automihoyobbs

AutoMihoyoBBS的补档(支持原神，崩坏3等米哈游游戏和米游社签到)

awesome-api-security

API安全问题集合版

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-exploit

一个漏洞利用工具仓库

awesome-incident-response

应急响应工具合集取证分析箱

awesome-security-collection

1000+ Github Security Resource Collection Repos.

bak1

bak2

blasting_dictionary

爆破字典

blind-watermark

Watermark added to the frequency domain by Fourier transform

blth-server

The server side of BLTH.

bluescan

A Bluetooth scanner for hacking

bluetooth-cve

常用蓝牙漏洞CVE poc、EXP

bt5-coder-blog

byzain.github.io

chaos

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

chatgpt-codereview

这是一个调用chatGPT进行代码审计的工具

cheetah

用来存储Cheetah的脚本文件

cheetah-

a very fast brute force webshell password tool

china-telecom-helper

**电信助手,白嫖年入保底256+话费 .每月金豆领取(lv6,1000金豆),每日签到(随机金豆),每日喂食宠物.每日登录奖励领取(5金豆),查看我的云盘(10金豆),翻牌 (10金豆),查看我的订单 (5金豆),打开消息 (100金豆),当日分享 (50金豆),浏览生活频道 (5金豆),查看我的金豆 (5金豆),关注直播 (5金豆),观看直播15s (5金豆),打开消息 (100金豆),答问卷 (100金豆)

cipr

将域名转为ip段权重

cola_dnslog

Cola Dnslog v1.3.1 更加强大的dnslog平台/无回显漏洞探测辅助平台 完全开源 dnslog httplog ldaplog rmilog 支持dns http ldap rmi等协议 提供API调用方式便于与其他工具结合 支持钉钉机器人、Bark等提醒 支持docker一键部署 后端完全使用python实现 前端基于vue-element-admin二开

ctf-tools

一款Python+Pyqt写的CTF编码、解码、加密、解密工具。

ctfever

A fantastic toolkit for CTFers and everyone :toolbox:

cve-vulnerability-information-downloader

Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show how such a dashboard can be created.