Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

Dify is an open-source LLM app development platform. Dify's intuitive interface combines AI workflow, RAG pipeline, agent capabilities, model management, observability features and more, letting yo…

解决Cursor在免费订阅期间出现以下提示的问题: You've reached your trial request limit. / Too many free trial accounts used on this machine. Please upgrade to pro. We have this limit in place to prevent abuse. Please l…

A community-driven AI automation framework that builds upon the incredible work of the open source community. Our goal is to combine language models with specialized tools for tasks like web search…

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

(持续更新)本项目为存储团队Bot小K每日监测到的最新POC，EXP，以及自己平时总结的POC，为了方便渗透测试过程中，漏洞查询，脱网环境的渗透测试。

红队技术笔记

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

A `.git` folder disclosure exploit

Converts PE into a shellcode

The Havoc Framework

Open repository for learning dynamic shellcode loading (sample in many programming languages)

“冰蝎”动态二进制加密网站管理客户端

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

MDUT - Multiple Database Utilization Tools

A reverse shell for Windows and Linux written in C.

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

Alternative Shellcode Execution Via Callbacks

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-ex…

Web path scanner

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

漏洞批量扫描框架，0Day/1Day全网概念验证，~~刷洞，刷肉鸡用~~

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

A platform for building proxies to bypass network restrictions.

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 命令回显+一键getshell