rootkit

Viper. Adversary simulation and Red teaming platform with AI

pystinger. Bypass firewall for traffic forwarding using webshell

agentic-soc-platform. Agentic SOC Platform: A powerful, flexible, open-source, and agent-centric automated security operations platform (AI SOC)

TFirewall. 防火墙出网探测工具,内网穿透型socks5代理

ligolo. Ligolo : 用于内网渗透的反向隧道

Caesar. 一个全新的敏感文件发现工具

ghostmirror. 通过webshell实现的内网穿透工具

CThun. 集成快速端口扫描服务识别和暴力破解

nginx-proxy-heroku. Shell

execute-assembly. Ruby

cthun3. Scanner for Intranet

splitmerge. 文件分割/合并工具

DarkGuardian. RDP远程登录挂盘监控工具

Funnywolf.

supplier. 主流供应商的一些攻击性漏洞汇总

DarkGld. A tool for quickly generating fishing Trojan horse.

proxypool. 自动抓取tg频道、订阅地址、公开互联网上的ss、ssr、vmess、trojan节点信息，聚合去重后提供节点列表，每15分钟更新

GrabAccess. Bypass Windows Password And Bitlocker

2022-HW-POC. 2022 护网行动 POC 整理

Ladon. 大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

pentagi. ✨ Fully autonomous AI Agents system capable of performing complex penetration testing tasks

mcp-shodan. The Shodan MCP Server by ADEO Cybersecurity Services provides cybersecurity professionals with streamlined access to Shodan's powerful reconnaissance capabilities through an intuitive Model Context Protocol interface. It enables efficient asset discovery, vulnerability assessment, and security monitoring through 11 consolidated analysis prompts.

CyberSecurity-MCPs. Model Context Protocol Server For Cyber Security

f8x. 红/蓝队环境自动化部署工具

xray-crack. xray社区高级版证书生成，支持到 1.2.0 版本

localGPT. Chat with your documents on your local device using GPT models. No data leaves your device and 100% private.

2021_Hvv. 2021 hw

SCA4ALL. Go

CrossNet-Beta. 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。

no-defender. no-defender re-up all credit goes to https://github.com/es3n1n/no-defender

henggeFish. 自动化批量发送钓鱼邮件（横戈安全团队出品）

metasploit-payloads. C

csload.net. 一个cobaltstrike shellcode加载器，过国内主流杀软

linglong. 一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示

HackBrowserData. Decrypt passwords/cookies/history/bookmarks from the browser. 一款支持全平台的浏览器数据导出工具

PentestGPT. AI-Powered Penetration Testing Assistant

gonmap. gonmap是一个go语言的nmap端口扫描库，使用nmap开源的端口扫描策略，在效率和速度上取得一个折中的中间值，便于做大网络环境的资产测绘。

DCSec. 域控安全one for all

InCloud. 运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

v0-system-prompts-models-and-tools.

Adinfo. 域信息收集工具

shellcodeloader. shellcodeloader

HRSword. 火绒剑独立版

kawaii-framework. Kawaii Framework

hwfwbypass. C

gdrv-loader. Kernel driver loader using vulnerable gigabyte driver (https://www.secureauth.com/labs/advisories/gigabyte-drivers-elevation-privilege-vulnerabilities) to load a unsigned driver

HOLLOW. EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

nmap. 修改nmap的特征流量，过 emergingthreats 的公开ids规则。

tig. Threat Intelligence Gathering 威胁情报收集，旨在提高蓝队拿到攻击 IP 后对其进行威胁情报信息收集的效率。

OXID. 通过windows的DCOM接口进行网卡进行信息枚举，无需认证，只要目标的135端口开放即可获得信息。可以有效提高内网渗透的效率，定位多网卡主机。

PortBender. TCP Port Redirection Utility

Mirai-Source-Code. Leaked Mirai Source Code for Research/IoC Development Purposes

DNSLog-Platform-Golang. DNSLOG平台 golang 一键启动版

pingtunnel. 流量转发加速工具 ping tunnel is a tool that advertises tcp/udp/socks5 traffic as icmp traffic for forwarding.