Discover how Invisi-Shell bypasses all PowerShell security features through .Net program hooks. Learn about its usage and compilation requirements on the Khan S

Discover how the LaZagne tool can help you retrieve stored passwords from various applications. Learn about its usage and download it from GitHub.

WAFW00F 是一种强大的Web应用防火墙检测工具，能够识别多种品牌的安全解决方案。通过发送HTTP请求和分析响应，轻松绕过WAF保护。

本文详细解析了通过Java RMI反序列化漏洞进行攻击的方法和过程，包括从外网突破到内网渗透的具体步骤。关键词：Java RMI, 反序列化漏洞, CVE-2017-3241, 内网渗透, webshell

Urlhunter 是一个强大的侦察工具，允许对通过缩短器服务（如bit.ly和goo.gl）暴露的URL进行搜索。本文介绍了其安装、使用方法及特点，适用于网络安全专业人士。

了解如何使用frp进行内网资产测试，掌握服务端和客户端配置方法。通过搭建隧道实现对外部互联网的访问，保障网络安全。

Learn how to create your own malware sample detection tool using YARA rules. This guide covers the development process, including the use of tools like whohk an

EHole是一款专门用于红队作战的信息收集工具，能够快速定位易被攻击的重点系统。它支持本地文件和FOFA API两种指纹识别方式，帮助安全团队精准探测目标。

Learn how to identify and exploit subdomain takeover vulnerabilities on Dell's subdomains. Discover the process of finding dead subdomains and performing concep

Learn how to create your own weak password scanning tool using Python. This guide covers essential modules like RDP, SMB, FTP, SSH, Telnet, and MySQL for detect

Discover how to quickly identify more vulnerable assets using the WebAliveScan tool. Perfect for security professionals and penetration testers.