Highlights
-
Fenjing Public
专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, designed for CTF
-
Typhon Public
Forked from Team-intN18-SoybeanSeclab/Typhonpyjail (python jail) 绕过 一把梭 CTF 工具
-
-
CVE-2024-28397: js2py sandbox escape, bypass pyimport restriction.
-
EtherGhost Public
新一代Webshell管理器,兼容蚁剑与冰蝎的PHP webshell
-
-
AstrBot Public
Forked from AstrBotDevs/AstrBot✨ 易上手的多平台 LLM 聊天机器人及开发框架 ✨ 平台支持 QQ、QQ频道、Telegram、微信、企微、飞书、钉钉 | 知识库、MCP 服务器、OpenAI、DeepSeek、Gemini、硅基流动、月之暗面、Ollama、OneAPI、Dify 等。 WebUI。
Python GNU Affero General Public License v3.0 UpdatedJun 16, 2025 -
NUR Public
Forked from nix-community/NURNix User Repository: User contributed nix packages [maintainer=@Pandapip1]
Python MIT License UpdatedMay 30, 2025 -
-
-
ddddocr Public
Forked from sml2h3/ddddocr带带弟弟 通用验证码识别OCR pypi版
Python MIT License UpdatedApr 21, 2025 -
-
fscan Public
Forked from shadow1ng/fscan修复results.txt默认保存目录为当前目录而不是文件所在目录
-
-
Js2Py Public
Forked from PiotrDabkowski/Js2PyJavaScript to Python Translator & JavaScript interpreter written in 100% pure Python🚀 Try it online:
-
-
CVE-2024-39205-Pyload-RCE Public
Pyload RCE with js2py sandbox escape
-
-
Stowaway Public
Forked from ph4ntonn/Stowaway👻Stowaway -- Multi-hop Proxy Tool for pentesters
Go MIT License UpdatedSep 9, 2024 -
cnext-exploits Public
Forked from ambionics/cnext-exploitsExploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()
Python UpdatedSep 6, 2024 -
ShiroAttack2 Public
Forked from SummerSec/ShiroAttack2shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
Java MIT License UpdatedAug 22, 2024 -
Shaco Public
Forked from souzomain/ShacoShaco is a linux agent for havoc
C MIT License UpdatedAug 15, 2024 -
Havoc Public
Forked from HavocFramework/HavocThe Havoc Framework.
Go GNU General Public License v3.0 UpdatedAug 13, 2024 -
-
JNDI-Injection-Exploit Public
Forked from welk1n/JNDI-Injection-ExploitJNDI注入测试工具(A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc)
Java MIT License UpdatedAug 5, 2024 -
POC-bomber Public
Forked from tr0uble-mAker/POC-bomber添加限制请求并发量等功能 | 利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
-
-
PentesterSpecialDict Public
Forked from evilc0deooo/PentesterSpecialDictDictionary for penetration testers happy hacker
PHP UpdatedSep 8, 2023 -
ProxyPool Public
Forked from Python3WebSpider/ProxyPoolAn Efficient ProxyPool with Getter, Tester and Server
Python MIT License UpdatedSep 1, 2023 -