排序
GoPhantom 是一个为红队演练和安全研究设计的下一代荷载加载器（Payload Loader）生成器，具有免杀能力
GoPhantom is a next-generation payload loader generator designed for red team exercises and security research. It uses AES-256-GCM encryption, dynamic keys, dec
10个月前重掌主动权：企业该如何修复混乱的安全运营
Learn strategies to improve security operations in complex hybrid and multi-cloud environments. Discover how unified policies and automated platforms can help e
10个月前Burp Suite扩展，用于将HTTP请求和响应按分组进行组织和管理，提升渗透测试和Web应用安全评估的效率
Burp Suite的GroupedHistoryPlugin扩展能够帮助您高效地组织和管理HTTP请求与响应，提升渗透测试和Web应用安全评估的工作效率。
10个月前100个CMD运行命令大全汇总，IT运维人员常备！
掌握100个常用的CMD运行命令，涵盖系统维护、网络配置和文件操作。适用于IT运维人员的必备技能！
10个月前致远OA文件上传接口的序列化与压缩机制，实现绕过双引号限制写入可执行JSP WebShell
本文介绍了一种针对致远OA系统特定接口的利用工具，通过合法DataRecord对象和JSONUtil、ZipUtil进行序列化与压缩处理，实现JSP WebShell绕过双引号限制。
10个月前用于渗透测试的WebFuzz扫描工具
Discover the power of WebFuzz with FinderFuzz for comprehensive web application security testing. This tool supports deep link crawling, parameter fuzzing, and
10个月前支持Tomcat内存马查杀的JSP脚本
本文介绍了一个改进版的TomcatMemshellScanner工具，支持多种内存马类型查杀，并修复了无class落地内存马等问题。适用于网络安全和Java技术领域的专业人士。
10个月前存储桶配置漏洞检测浏览器插件
Discover and address common security vulnerabilities in cloud storage buckets with BucketTool's browser plugin. Support for Alibaba Cloud OSS, Tencent Cloud COS
10个月前一款面向安全运维场景的集成化利器
Discover the integrated solution for efficient and precise security operations with our powerful tool. It includes asset management, vulnerability tracking, con
10个月前Yscan 是一款集 Web 资产扫描、图形化 Nuclei POC 管理、漏洞验证与数据整理于一体的实战型安全工具。
Yscan是一款集Web资产扫描、图形化Nuclei POC管理和数据整理于一体的实战型安全工具，帮助快速识别互联网暴露面中的薄弱点与攻击面。
10个月前xxl-job漏洞综合利用工具
Discover and exploit vulnerabilities in xxl-job such as default credentials, unauthorized API access, and command injection. Utilize memory horses for malicious
10个月前网络摄像头漏洞扫描工具！更新
Discover the latest updates to InGram, a powerful network camera vulnerability scanner. Integrate it with common devices like Hikvision, Dahua, and Uniview for
10个月前