This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD

The most powerful bruteforcer / password sprayer Artifact

declutters url lists for crawling/pentesting

My custom created nuclei for SQLi, bugbounty, pentesting

基于腾讯云创建ARL-worker

ScopeSentry Plugin Market

一个轻量的工具集合

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

一款轻量级匹配Sink点的代码审计扫描器，为了帮助红队过程中快速代码审计的小工具

一个还算强大的Web思维导图。A relatively powerful web mind map.

HTTP parameter discovery suite.

Labeled DNS exfiltration datasets and algorithms of DNS tunneling detection

新一代Webshell管理器，兼容蚁剑与冰蝎的PHP webshell

🤱🏻 Turn any webpage into a desktop app with Rust. 🤱🏻 利用 Rust 轻松构建轻量级多端桌面应用

Fast and customizable subdomain wordlist generator using DSL

GitHub项目监控 && CodeQL自动扫描 (GitHub project monitoring && CodeQL automatic analysis)

Diaphora, the most advanced Free and Open Source program diffing tool.

Quickly find differences and similarities in disassembled code

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

Next Generation HTTP Dir/File Fuzz Artifact

开放源码的无App推送服务，iOS14+扫码即用。亦支持快应用/iOS和Mac客户端、Android客户端、自制设备

Gotator is a tool to generate DNS wordlists through permutations.

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

OpenRASP 漏洞测试环境

一款快速、全面、易用的页面信息提取工具，可快速发现和提取页面中的JS、URL和敏感信息。