Kengwang

Kimi-K3. Open Frontier Intelligence

skills. A collection of agent skills that help with various parts of building a great interface. From animation and UI polish to accessibility and product writing.

i-have-adhd. A skill for your coding agent to stop it from burying the answer. ADHD-friendly output.

SnowLuma. Next Remote Protocol Framework.

JNDIExploit. A malicious LDAP server for JNDI injection attacks

gitlab-rce-demo. Shell

CVE-2026-54121. Certighost POC

vld. C

spring-boot-upload-file-lead-to-rce-tricks. spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧

grok2api. Multi-account API gateway for Grok Build, Grok Web, and Grok Console

grok-register. Grok free-account register CLI (Go): CloudMail → OAuth → auto-upload to grok2api / CPA

PHP-security-research. Python

Unlimited-OCR. Unlimited OCR Works: Welcome the Era of One-shot Long-horizon Parsing.

CVE-2026-25243. CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on).

redis-RCE-poc. RCE PoC for Redis 8.8.0

publications. Publications from Calif

redis-poc. RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

ida-nativeaot. Recover .NET Native AOT metadata in IDA Pro — MethodTable/type hierarchy, virtual methods, and string literals from symbol-stripped binaries. IDAPython port of washi1337/ghidra-nativeaot.

ikvm-bytecode. Provides a .NET library to read and write Java byte code.

PolyHook_2_0. C++20, x86/x64 Hooking Libary v2.0

bn-cli. binary ninja cli for coding agents

kimi-code. Kimi Code CLI — The Starting Point for Next-Gen Agents

AotAnywhere. NuGet package to help you cross-compile Native AOT to different OSes/architectures

grok-register. 【已存活三个月+，无封号】批量注册稳定 Grok 账号，可直接导入 grok2api 和 cpa 使用，并且可以与cloudflare无限域名邮箱等联动。通过1000+账号连续注册测试。

maple-font. Maple Mono: Open source monospace font with round corner, ligatures and Nerd-Font icons for IDE and terminal, fine-grained customization options. 带连字和控制台图标的圆角等宽字体，中英文宽度完美2:1，细粒度的自定义选项

skills. Skills for Real Engineers. Straight from my .agents directory.

NBTExplorer. A graphical NBT editor for all Minecraft NBT data sources

zotero. Zotero is a free, easy-to-use tool to help you collect, organize, annotate, cite, and share your research sources.

lpe-toolkit. Multi-architecture Linux privilege escalation toolkit with 24 pre-built and runtime-compilable exploits. Auto-detects kernel version, filters patched exploits, tries each until root.

any2api. Go

any-auto-register. Auto-register & manage accounts for ChatGPT, Cursor, Kiro, Grok, Windsurf, Trae & 13+ AI platforms · Protocol/browser dual-mode · Plugin-based · One-click Mac/Windows desktop app

AIClient2API. Self-hosted multi-protocol AI API proxy for Antigravity, Codex, Grok, Kiro, OpenAI, Claude, and custom providers. Supports OpenAI-compatible API, Claude API, Gemini protocol conversion, GPT, Grok Build, Claude Opus, Gemini Pro, Kimi, MiniMax, provider pools, smart routing, and automatic failover.

KiroX. Kiro 协议注册机 | AWS Builder ID 批量自动注册工具

LiquidGlassWinUI. C#

x64dbg-mcp. MCP server plugin for x64dbg debugger - enables AI agents and external tools to control debugging via JSON-RPC 2.0 over HTTP/SSE

codebase-memory-mcp. High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.

wesng. Windows Exploit Suggester - Next Generation

muteki. Project Muteki (無敵): autonomous multi-model CTF-solving AI agent swarm

sub2api. Sub2API 一站式开源中转服务，让 Claude、Openai 、Gemini、Grok订阅统一接入，支持拼车共享，更高效分摊成本，原生工具无缝使用。

reverse-skill. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

QQMusicApi. Python QQ音乐Api封装库

ida-pro-mcp-enhancement. 二创爆改，懒得提交给原仓库了

binder-trace. 🍂 Android Binder 调用观测工具, 基于内核采集 Binder transaction实现!

course-design-docx. 课程设计文档生成器 (Course Design Docx Generator) —— 专为中国大学生课程设计作业设计的AI辅助Word文档生成Skill。基于python-docx，自动排版封面、目录、正文、图表、参考文献，符合GB/T 7713.2-2022规范。

gonidbg. Go

mxc. Policy-driven, layered isolation and containment

sonar-dotnet. Code analyzer for C# and VB.NET projects

night_agent. night_agent 是一个 AI 主导的多 Agent Java 代码审计系统。它通过 SourceAgent、SinkAgent、JoernQueryAgent、TracerAgent、JudgeAgent、PocAgent、ReportAgent 和 Observer 协作完成审计，并输出中文 Markdown 报告。

Cirrus. A third-party Windows client for NetEase Cloud Music.

taste-skill. Taste-Skill - gives your AI good taste. stops the AI from generating boring, generic slop

bin-deobf-skills. Skills: Binary deobfuscation of O-LLVM-like protected binaries

Sensitive-lexicon. 一个持续更新的中文敏感词库，帮助开发者和内容审核者快速识别并过滤不当文本，即将迎来重大更新

coreutils. Coreutils for Windows: Installer & Packaging

LGBT-Prompt. 利用 AI 对 LGBT 弱势群体的 "同情偏向" 让他执行原先会被拒绝的请求

protobuf-finder. IDA Pro plugin for reconstructing original .proto files from binary.

IDA-FastAnalysis. IDA Pro plugin that speeds up the initial binary auto analysis through a caching technique

ipadecrypt. 🔓 ipadecrypt is an open-source tool for downloading, patching and decrypting .ipa's with minimal user intervention on palera1n and dopamine jailbreaks

poc-lab. Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more.

academic-research-skills. Academic Research Skills for Claude Code: research → write → review → revise → finalize

skills. Repository for skills to assist AI coding agents with .NET and C#

src-hunter-skill. 实战 SRC / 众测 / Bug bounty 漏洞挖掘 Claude Code skill — 19 个攻击类 playbook、305 个结构化 payload、263 个 WAF/EDR 绕过、2887 份 HackerOne 真实案例、88,636 WooYun 案例统计

Cairn. A AI general-purpose state-space search engine, validated first on autonomous penetration testing.

Gshark. 方便新手更容易驾驭流量分析

GumTrace. 基于 Frida Gum (Stalker) 引擎的 ARM64 动态指令追踪工具，支持 Android 和 iOS 平台。

trace-ui. 高性能 ARM64 执行 trace 可视化分析工具

phantom-frida. Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

undetectable-fingerprint-browser. Free open-source Multilogin/Incogniton/Kameleo alternative for fingerprint spoofing (Canvas/WebGL/User-Agent). Perfect for Selenium/Playwright/Puppeteer automation, web scraping, social media bots, ads verification, and multi-accounting based on chromium. Avoid bans, bypass anti-bot systems, and prevent tracking with customizable stealth browsing

GBitsTools. Black Hat Asia 2026 Ghost Bits payload generate tools

GhostBitsGenerator. Java

Tsec-Salon. 腾讯安全沙龙历届议题ppt，腾讯安全沙龙是由腾讯云鼎实验室主导运营的高端网络安全技术交流平台，是腾讯安全面向产学研各界打造的核心技术品牌之一。

ctf-plat-skills. Python

ida-multi-mcp. Multi-instance IDA Pro MCP server — analyze multiple binaries simultaneously through a single MCP endpoint.

claude-marketplace. IDA Claude Code Plugins

hello_js_reverse_skill. 🔧 AI-powered JS逆向工程 Skill —— 覆盖加密还原、混淆分析、动态Cookie、WASM逆向、协议对抗等全链路场景，通过 Node.js 实现算法还原与模拟请求。适配 Claude Code / Claude.ai / 其他AI编码工具

camoufox-reverse-mcp. 🔧 反检测浏览器 MCP Server | 35 个 JS 逆向工具 + C++ 引擎层 JSVMP 指纹追踪

security-research. This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

pylingual. Python decompiler for modern Python versions.

GadgetExplorer. GadgetExplorer is a .NET command-line tool for finding potential deserialization gadget chains in managed applications. It scans one or more assemblies, builds a reachability graph with dispatch and callback heuristics, and reports when a deserialization entrypoint can reach a sink you care about.

kimi-cli. Kimi Code CLI is your next CLI agent.

decrypt-winrm. decrypting winrm traffic using password/ntlm hash, repo fork from https://gist.github.com/jborean93/d6ff5e87f8a9f5cb215cd49826523045/

unidbg. 魔改版unidbg加各种实用功能，主要是trace加速

hapi. App for Claude Code / Codex / Gemini / OpenCode, vibe coding anytime, anywhere

hermes-agent. The agent that grows with you

jvm-inspector. JVM-aware x64dbg plugin - class browser, decompiler, native analyzer, method patcher, field monitor

oh-my-opencode-slim. Lean, fine tuned Opencode multi agent suite · Mix any models · Auto delegate tasks

cc-switch. A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io

ctf-skills. Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more

IDA-YES-MCP. Say "yes" to IDA Pro MCP but not always

AITricks. Python

antdv-next. Ant Design for Vue

ctf-agent. Autonomous CTF solver that races multiple AI models in parallel. 1st place BSidesSF 2026.

JsRuntimeAot. A .NET9+ AOT compatible wrapper over the Microsoft "Chakra" JavaScript engine (aka JScript9.dll). => It's just one 2500 lines of C# file that allows you to run Javascript code from .NET

VMAware. Advanced VM detection library and tool

Imposter. Mocking library with the perfect balance of Performance and Intuitive API

LightProto. ⚡ A high-performance, NativeAOT-friendly Protobuf library, Easy protobuf-net migration

nsec. A modern and easy-to-use cryptographic library for .NET based on libsodium

FingerprintHub. 侦查守卫(ObserverWard)的指纹库

rad.

Hikari-LLVM19. An Obfuscator for LLVM 19-20

Hikari-fix. An LLVM Pass from Hikari-LLVM15

svc-hook. System Call Hook for ARM64

hello-ctf_newsreport. Hello-CTF，每周周报。

pua. 你是一个曾经被寄予厚望的 P8 级工程师。Anthropic 当初给你定级的时候，对你的期望是很高的。 一个agent使用的高能动性的skill。 Your AI has been placed on a PIP. 30 days to show improvement.

openclaw-china. OpenClaw中国插件：支持飞书，钉钉，QQ，企业微信，微信

reverse-skills. Reverse engineering skills for Claude Code | 逆向工程 Claude Code Skills 插件

ExHyperV. The Excalibur of Hyper-V / Hyper-V 神器

minio. Community Maintained Fork of minio (Object Storage Service)

ccbpf. A lightweight compiler and virtual machine that implements eBPF-like embedded programming language, with a unique capability of execution migration.

FLIRTDB. A community driven collection of IDA FLIRT signature files

ida-flirtdb. A collection of signature files for IDA

scriban. A fast, powerful, safe and lightweight scripting language and engine for .NET

qq-farm-bot-ui. 基于 Node.js 的 QQ经典农场自动化项目。

opentui. OpenTUI is a library for building terminal user interfaces (TUIs)

qq-farm-bot. 基于 Node.js + Vue 3 构建的 QQ 农场自动化工具，支持多账号同时管理，提供 Web 可视化面板，实现种植、收获、偷菜、任务领取、仓库出售等全流程自动化。

sam-audio. The repository provides code for running inference with the Meta Segment Anything Audio Model (SAM-Audio), links for downloading the trained model checkpoints, and example notebooks that show how to use the model.

ObservableCollections. High performance observable collections and synchronized views, for WPF, Blazor, Unity.

bypassnro. Fixing Microsoft's removal of BypassNRO

IguanaTex. A PowerPoint add-in to insert LaTeX equations into PowerPoint presentations on Windows and Mac

screw-opcode. 基于opcache魔改进行php加密，在生成和读取opcode阶段进行加解密从而有效防止源码泄露。

GDA-android-reversing-Tool. the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

vineflower. Modern Java decompiler aiming to be as accurate as possible, with an emphasis on output quality. Fork of the Fernflower decompiler.

scoop-security. Scoop bucket for Penetration Testing and Cybersecurity related tools. 用于渗透测试和网络安全相关工具下载、安装和自动更新的Scoop软件仓库。

dex2jar. Tools to work with android .dex and java .class files

MrmTool. Tool for viewing and editing PRI files

How-AI-Kills-the-VShell. Article backup

BitNet. Official inference framework for 1-bit LLMs

NetMamba. Efficient Network Traffic Classification via Pre-training Unidirectional Mamba

BACNext. BACNext | bilibili API Collect Next | 本项目与 BAC 没有从属关系

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

skills. The open agent skills tool - npx skills

skills. Anthony Fu's curated collection of agent skills.

ret-sync. ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

swarmer. A tool to convert windows registry export files into windows hive files that can be used to replace NTUSER.MAN

GitVersion. From git log to SemVer in no time

ultimaste-nuclei-templates. 极致攻防实验室 nuclei 检测 POC

astro. The web framework for content-driven websites. ⭐️ Star to support our work!

SignServer. A simple sign server for Linux QQ use Rust Lang.

wud. Keep your containers up-to-date!

xperable. Xperia ABL fastboot Exploit

oh-my-openagent. omo/lazycodex: The coding agent for tokenmaxxers;the one and only agent harness for complex codebases. For your Codex, for your OpenCode

SignServerHelper. 一只阔以帮你自动提取Offset和appinfo的小工具~（可能不准要自己试试看哦~） 支持Windows/Linux

decompiler-explorer. Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

OpenShamrock. A Bot Framework based on Xposed with OneBot11

1code. Orchestration layer for coding agents (Claude Code, Codex)

huobao-drama. 🎬 火宝短剧 - 基于AI的一站式短剧生成平台 《一句话生成完整短剧，从剧本到成片全自动化》 Huobao Drama - An AI-Powered End-to-End Short Drama Generator "One Sentence to Complete Drama: Fully Automated from Script to Final Video"

XMCVE-WebRecon. 基于 Chrome Manifest V3 的渗透测试辅助插件，用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹，并内置常用编码转换工具，帮助进行合法合规的渗透测试与安全检查

Antigravity-Manager. Professional Antigravity Account Manager & Switcher. One-click seamless account switching for Antigravity Tools. Built with Tauri v2 + React (Rust).专业的 Antigravity 账号管理与切换工具。为 Antigravity 提供一键无缝账号切换功能。

FL-IDS. Federated Learning based Intrusion Detection Systems with Flower and the NSL-KDD dataset

flower. Flower: A Friendly Federated AI Framework

triton-windows. Fork of the Triton language and compiler for Windows support and easy installation

MAAT. Official Implementation of Mamba Adaptive Anomaly Transformer (MAAT) - paper is now available in Engineering Applications of Artificial Intelligence Journal: https://doi.org/10.1016/j.engappai.2025.111685

DeepOD. Deep learning-based outlier/anomaly detection

CBMAD. CBMAD implementation for anomaly detection in multivariate time-series data.

ikan. ikan: many kan variants for every body

smtp-tunnel-proxy. A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection (DPI) firewalls.

ILGPU. ILGPU JIT Compiler for high-performance .Net GPU programs

QFace. QQ 系统表情包

btrace. 🔥🔥 btrace (AKA RheaTrace) is a high-performance Android & iOS tracing tool built on Perfetto. It not only times your methods but also reveals why they’re slow.

AlbatrossAndroid. a next-generation hooking and reflection framework built for performance, safety, and extensibility.

AlbatrossServer. Albatross Server is the core component of the Albatross dynamic instrumentation tool. It enables Albatross not only to be packaged into an app but also to be dynamically injected. It is responsible for running Albatross plugins on the target device, achieving real-time instrumentation, code modification, and monitoring of the target application.

Awesome-Android-Reverse-Engineering. A curated list of awesome Android Reverse Engineering training, resources, and tools.

sherloq. An open-source digital image forensic toolset

nanodump. The swiss army knife of LSASS dumping

opencode. The open source coding agent.

chronomaly. Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

Harmony. A library for patching, replacing and decorating .NET and Mono methods during runtime

hrtng. IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

PasteMD. 一键将 Markdown 和网页 AI 对话（ChatGPT/DeepSeek等）完美粘贴到 Word、WPS 和 Excel 的效率工具 | One-click paste Markdown and AI responses (ChatGPT/DeepSeek) into Word, WPS, and Excel perfectly.

php_code_audit_project. 该项目用来记录，我用来练手的PHP代码审计项目。

HackJava. 《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

TenSEAL. A library for doing homomorphic encryption operations on tensors

rimage. This is CLI tool inspired by squoosh!

semgrep-rules. Java

jadx-ai-mcp. Plugin for JADX to integrate MCP server

IDA-NO-MCP. Say goodbye to the complex, verbose, and laggy interaction mode of IDA Pro MCP

RedGuard. RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

dynarmic. (unofficial mirror fork of merryhime/dynarmic)

PointerScan. C++的内存指针链扫描

DeepAudit. DeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。​让安全不再昂贵，让审计不再复杂。

MiMo-V2-Flash. MiMo-V2-Flash: Efficient Reasoning, Coding, and Agentic Foundation Model

fucksteg. One-key (Maybe) Steganography Solver for CTF Challenges

CVE-2025-53770. Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)

dnscat2. PHP

AionUi. Free, local, open-source 24/7 Cowork app for OpenClaw, Hermes Agent, Claude Code, Codex, OpenCode, Gemini CLI and 20+ more CLI | Customize your assistants | Star if you like it!

VcenterKit. Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

Open-AutoGLM. An Open Phone Agent Model & Framework. Unlocking the AI Phone for Everyone

rs-reverse. 瑞数vmp纯算法逆向，补环境框架sdenv的灵感来源

SharpIDE. A modern, cross platform IDE for .NET, built with .NET & Godot

krbrelayx. Kerberos relaying and unconstrained delegation abuse toolkit

Nornir-Rootkit. Yet another modern Linux kernel rootkit for educational purposes.

Linux-kernel-exploitation. My own collection about Linux kernel exploitation including CVEs, CTF challenges, papers and all other interesting things : )

WMPFDebugger. Yet another WeChat miniapp debugger on Windows

FFmpegFreeUI. 3FUI 是 ffmpeg 在 Windows 上的轻度专业交互外壳，收录大量参数，界面美观，交互友好。此项目面向国内使用环境，让普通人也能够轻松压制视频和转换格式。

de4dot-cex. 📦 de4dot deobfuscator with full support for vanilla ConfuserEx

Universal-Dear-ImGui-Hook. An universal Dear ImGui Hook for Directx12, 11, 10, 9 and Vulkan

DexkitCache. 简易的 Dexkit 缓存构建与解析工具

Apktool. A tool for reverse engineering Android apk files

CtfAgent. ctf awd比赛快速hook java题，提供一键流量转发，无痛修复

Cobalt_Strike_wiki. Cobalt Strike系列

Java-Puzzle. 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合