Learn how to use automated tools like Fofa and Rad to scan educational assets for vulnerabilities. This guide covers setting up Burp, Xray, and Python scripts f

FireEyeGoldCrystal是一款强大的GitHub监控和信息收集工具，支持CVE、免杀等内置关键字及自定义关键字。它能够过滤敏感词，并通过多种方式推送通知。

了解如何通过BurpSuite和MSF进行Tomcat弱口令爆破，以及利用中国蚁剑生成JSP马进行War包部署Getshell操作。实战演练，提升安全防护能力。

了解自动化模糊测试工具Wfuzz、ffuf和GoBuster，以及如何使用它们进行网络漏洞扫描。探索流行字典和参考资料库以增强你的安全测试能力。

Savior is an automated penetration test report generation system designed to standardize and simplify the creation of high-quality security reports. Key feature

Learn how to use a proxy pool with tools like Burpsuite and Python requests. This guide covers setup methods and practical applications in penetration testing.

This article provides a comprehensive guide on red team info gathering techniques, including initial known information, root domain search, subdomain enumeratio

Discover Hoaxshell, a unique and undetected Windows reverse shell tool that uses HTTP(S) for covert communication. Learn how to generate and use PowerShell payl

SScan是一款模仿BBScan的自动化漏洞扫描工具，支持常见目录扫描、信息泄露检测及未授权访问检查等功能。下载链接：https://github.com/olist213/SSc

了解NACS渗透测试扫描器的强大功能，包括服务扫描、poc探测、数据库弱口令爆破等。快速安装与使用指南，适用于安全运维人员进行网络安全检测。

Crayfish是一款用于实现快速、全面渗透测试的信息收集工具，支持子域名枚举和第三方接口。适用于网络安全专业人士进行学习交流使用。

PenKitGui is a customizable penetration testing toolbox built with Python's Wxpy module. It offers better expandability and ease of modification compared to oth