Explore how an unauthorized access through Swagger API led to discovering critical information like admin credentials and RTMP addresses. Learn about the steps

API-Explorer是一款灵活的API接口管理工具，支持定义请求类型、URL、header、body等，并可提取认证token。适用于公众号APPID泄露后的AccessToken获取等场景。

了解如何使用Burp Customizer为您的Burpsuite工具添加多种自定义皮肤，提升工作效率与用户体验。

Fscan是一款强大的内网综合扫描工具，支持主机存活探测、端口扫描、服务爆破等多项功能。最新更新包括控制台颜色输出和保存文件JSON结构等新特性。

Discover Ophcrack, a powerful and free Windows password cracking tool based on rainbow tables. It supports multiple platforms including Windows, Linux/Unix, Mac

Goblin is a red-blue cybersecurity simulation tool designed for phishing drills. It supports caching static files, request dumping, and log outputs to Elasticse

了解最新版PyWxDump，一款用于获取微信用户个人信息和解密聊天记录的取证工具。支持多版本微信，并提供安装与使用指南。

jMG 是一款支持高度自定义的 Java 内存马生成工具，提供多种中间件和框架的支持。适用于 Tomcat、Resin 等常见中间件，并支持多种内存马类型及输出格式。

Discover and quickly detect all databases including MySQL, MSSQL, PostgreSQL, and Redis with the Sqlinfo tool. Enhance your penetration testing by saving time i

Discover the lightweight Pillager tool for post-exploitation. It collects sensitive data from browsers, emails, and chat apps to aid in advanced penetration tes

Discover how DataMiner quickly extracts information from various databases such as MySQL, MSSQL, Oracle and MongoDB. Supports full database sampling, custom reg

Java Memshell Generator (jMG) 是一款支持高度自定义的Java内存马生成工具，适用于Tomcat等常见中间件。提供多种内存马类型和输出格式选择，专为安全研究设计。