Open-Source Unified Vulnerability Management, DevSecOps & ASPM

Turn any webpage/Vue/React and so on into desktop and mobile app under 5M with easy in few minutes. 轻松将任意网站/Vue/React等项目构建为轻量级(小于5M)多端桌面应用和手机应用仅需几分钟. https://ppofficial.netlify.app

Python packaging and dependency management made easy

🗃 Open source self-hosted web archiving. Takes URLs/browser history/bookmarks/Pocket/Pinboard/etc., saves HTML, JS, PDFs, media, and more...

PolarDB-X is a cloud native distributed SQL Database designed for high concurrency, massive storage, complex querying scenarios.

Investment Research for Everyone, Everywhere.

🎨 Diagram as Code for prototyping cloud system architectures

Super timeline all the things

Generation of diagrams like flowcharts or sequence diagrams from text in a similar manner as markdown

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

Official code implementation of General OCR Theory: Towards OCR-2.0 via a Unified End-to-end Model

Deserialization payload generator for a variety of .NET formatters

A free Python-distribution for Windows platform, including prebuilt packages for Scientific Python.

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

fofax is a command line query tool based on the API of https://fofa.info/, simple is the best!

One click to deploy your own AI Application Web UI, including GPT, Midjourney, ChatDoc, QrArt and easily earn profits.

PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC

A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 9…

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

The FINOS Regulation Innovation Special Interest Group (SIG) is a community of people interested in creating open source solutions for regulatory and compliance issues in financial services.

本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。

RF transmitter for Raspberry Pi

Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

The source files and tools needed to build the OWASP Cornucopia deck in various languages

Jupyter notebooks for teaching/learning Python 3

This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)

Ghidra is a software reverse engineering (SRE) framework

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and tests…