Pre-Built Vulnerable Environments Based on Docker-Compose

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

Web path scanner

Exploit Development and Reverse Engineering with GDB Made Easy

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

“冰蝎”动态二进制加密网站管理客户端

CTF中常见键盘流量解密脚本

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy serv…

🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。

Volatility 3.0 development

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

An advanced memory forensics framework

Firmware Analysis Tool

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

USB键盘流量包取证工具 , 用于恢复用户的击键信息

A `.git` folder disclosure exploit

Automatic SQL injection and database takeover tool

OneForAll是一款功能强大的子域收集工具

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Open-Source Phishing Toolkit

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

This is a webshell open source project

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Damn Vulnerable Web Application (DVWA)

中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

Most advanced XSS scanner.

Automatic SSRF fuzzer and exploitation tool

rsatool can be used to calculate RSA and RSA-CRT parameters

一个好玩的Web安全-漏洞测试平台

爆破字典