Web渗透测试框架 - 指纹识别、敏感信息检测、AI安全分析

一个基于 LangGraph 的自动化 LLM 越狱（Jailbreak）框架，通过多智能体协作，自动生成并迭代攻击提示词，旨在绕过目标大模型的安全护栏，用于红队测试，用于红队测试。An Automated LLM Jailbreak Framework (APE) for red team testing, works good in HTB AI Red Teamer course vu…

Automatically Collect POC or EXP from GitHub by CVE ID.

A high-level code auditing tool that supports the MCP protocol, integrated with an AST engine, rule engine, code graph, and other tools, can further enhance LLM auditing capabilities. 支持 MCP 协议的高级代…

src资产管理漏洞扫描平台，子域名爆破，端口扫描，站点发现，目录扫描，爬虫，漏洞扫描

WEB安全手册，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】

收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.

Nday漏洞复现：打点漏洞、提权漏洞、内网漏洞

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

List of Awesome Red Teaming Resources

A curated list of awesome Python frameworks, libraries, software and resources

滴水逆向初、中级学习笔记，不定时更新，自用仓库，不喜勿喷；感谢滴水，有如此完整体系的学习视频，白嫖党嫖了一波...感谢滴水的老师，听课受益匪浅。

Fiora：漏洞PoC框架的图形版，快捷搜索PoC、一键运行Nuclei

A curated list of awesome YARA rules, tools, and people.

Check your WAF before an attacker does

sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment

ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

一份通俗易懂、风趣幽默的Java学习指南，内容涵盖Java基础、Java并发编程、Java虚拟机、Java企业级开发、Java面试等核心知识点。学Java，就认准二哥的Java进阶之路😄

For educational purposes only, exhaustive samples of 450+ classic/modern trojan builders including screenshots.

Complete list of LPE exploits for Windows (starting from 2023)

Repo for creating awesome automation scripts to make my panda lazier

Vanir is a source code-based static analysis tool that automatically identifies the list of missing security patches in the target system. By default, Vanir pulls up-to-date CVEs from Open Source V…

Execute commands in other Sessions

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

🤖 Fork me to try out Dependabot