dns-black-cat

DNS-Black-CatDBC Multi-platform toolkit for an interactive C2C DNS shell, by using DNS-Black-Cat, you will be able to execute system commands in shell mode over a fully encrypted covert channel. Server ported as a python script, which acts as DNS server with required functionalities to provide...

censys-python

Censys Python 库 !WARNING 弃用通知 ：Censys Search v1 和 v2 API 即将弃用。请迁移至新的 Censys Platform 。 📖 新 API 文档 ：https://docs.censys.com/reference/get-started 📦 新 Python SDK ：censys/censys-sdk-python 🖥️ 新 CLI 工具 （cencli）：censys/cencli ⚠️ 如果您计划使用新的 CLI，您需要先卸载此包的 CLI ，因为两者都使用 censys 命令名称 此库中的 Censys ASM API 不会弃用...

phpsploit

Full-featured C2 framework which silently persists on webserver via polymorphic PHP oneliner codeclimate maintainability Created by nil0x42 and contributors !https://assets.kitploit.com/production/public/readmes/320/aca304368ddb35833ee8b1f57c068ae36288119...

Boomerang

Boomerang Boomerang is a tool to expose multiple internal servers to web/cloud using HTTP+TCP Tunneling. The Server will expose 2 ports on the Cloud. One will be where tools like proxychains can connect over socks, another will be for the agent to connect. The agent can be executed on any interna...

duf

duf 磁盘用量/空闲工具（Linux、BSD、macOS 和 Windows） 特性 用户友好、色彩丰富的输出 适应你的终端主题与宽度 根据需求排序结果 分组与过滤设备 可方便地输出 JSON 安装 软件包 Linux Arch Linux：pacman -S duf Ubuntu（22.04 及更新版本）/ Debian（12 及更新版本）：apt install duf Fedora Linux：dnf install duf Nix：nix-env -iA nixpkgs.duf Void Linux：xbps-install -S duf Gentoo Linux：emerge...

qiling

Qiling 的使用案例、博客及相关工作 Qiling 是一个高级二进制模拟框架，具有以下特性： 模拟多平台：Windows、macOS、Linux、Android、BSD、UEFI、DOS、MBR。 模拟多架构：8086、X86、X8664、ARM、ARM64、MIPS、RISC-V、PowerPC。 支持多种文件格式：PE、Mach-O、ELF、COM、MBR。 通过 Demigod 支持 Windows 驱动 .sys、Linux 内核模块 .ko 及 macOS 内核 .kext。 在隔离环境中模拟并沙箱化代码。 提供完全可配置的沙箱。...

AdaptixC2

AdaptixC2 v1.2 FEB, 28: ¿Qué ha cambiado en la versión v1.2? Adaptix es un marco extensible de post-explotación y emulación adversarial diseñado para pruebas de penetración autorizadas. El servidor Adaptix está escrito en Golang para permitir flexibilidad al operador. El cliente GUI está escrito ...

threatbox

Threatbox - 标准攻击平台 ThreatBox 是一个基于 Linux 的标准化受控攻击平台。我使用该平台的某个版本已有多年。它最初是一系列脚本的集合，后来演变为一个滚动的虚拟机，再后来变成用于构建 Linux ISO 的代码，现在则已转换为一套 Ansible 剧本。为什么用 Ansible？为什么不呢？这似乎是标准攻击平台配置的下一步自然演进。 本项目使用 Ansible 剧本和角色来对 Linux 目标机（已在 Ubuntu 18.04 上测试）进行部署后配置。 该项目旨在作为创建、管理和使用标准攻击平台（用于红队或渗透测试）的启动流程。...

rz-ghidra

rz-ghidra This is an integration of the Ghidra decompiler and Sleigh Disassembler for Rizin. It is solely based on the decompiler part of Ghidra, which is written entirely in C++, so Ghidra itself is not required at all and the plugin can be built self-contained. This project was presented,...

Osinton

Osinton Osinton is an open-source OSINT Open Source Intelligence tool designed to perform structured investigations on individuals using publicly available information. The project allows users to search, correlate, and analyze digital footprints such as names, usernames, email addresses, and pho...

jumpserver

一个开源的 PAM 平台 堡垒主机 !license-shieldlicense-link !docs-shielddocs-link !deepwiki-shielddeepwiki-link !discord-shielddiscord-link !docker-shielddocker-link !github-release-shieldgithub-release-link !github-stars-shieldgithub-stars-link !gitcode-shieldgitcode-link English · 中文简体 · 中文繁體 · 日本語 · Portugu...

oss-oopssec-store

OSS - OopsSec Store Security training for the apps you actually ship. 36 challenges across web, API, authentication, business logic, cryptography, supply chain, AI agents and MCP. Break a deliberately vulnerable e-commerce app built on Next.js, React, TypeScript and Prisma. Find the bugs. Exploit...

kontext-cli

Website | Documentation | Dashboard | Discord Stop risky AI-agent actions before they run AI agents do more than suggest code. They run shell commands, read files, call services, change infrastructure, and interact with production systems. Kontext puts local policy between AI agents and the tools...

vercel-april2026-incident-response

Vercel April 2026 Incident Response Guide Last updated: 20 April 2026 @ 12.07 PM AEST/Brisbane - v2 — incorporates Vercel CEO update of 20 April IMPORTANT: This is not legal or official advice. If you think you have been compromised please reach out to an incident response partner. This informati...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

faraday-cli

Faraday on the terminal Use faraday directly from your favorite terminal faraday-cli is the official client that make automating your security workflows, easier. Before installing, we recommend creating and activating a Python virtual environment to avoid affecting your system Python packages. Fo...

iDescriptor

Cross-platform, open-source and free idevice management tool written in Rust and Qt Sponsored by first-of-its kind private and secure consumer cellular service in the US Download DO NOT DOWNLOAD FROM ANY WEBSITE CLAIMING TO BE US WE ONLY HAVE https://idescriptor.github.io AND RELEASES WILL BE MAD...

pyFUD

pyFUD CROSS PLATFORM MULTI CLIENTS FUD RAT Note: This Project is under active development. May contains some bugs Warning: 1. Don't Upload Any Payloads To VirusTotal.com Bcz This tool will not work with Time. 2. Virustotal Share Signatures With AV Comapnies. 3. Again Don't be an Idiot!...

Supershell

Supershell es una plataforma C2 de control remoto accesible a través de un servicio WEB. Mediante el establecimiento de túneles SSH inversos, obtiene una Shell totalmente interactiva y admite Payloads de múltiples arquitecturas de plataforma. Características • Plataformas soportadas • Diagrama de...

masscan

MASSCAN: Mass IP port scanner This is an Internet-scale port scanner. It can scan the entire Internet in under 5 minutes, transmitting 10 million packets per second, from a single machine. Its usage parameters, output is similar to nmap, the most famous port scanner. When in doubt, try one of tho...