Build software better, together

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

Richkware is a modern C++20 framework for building educational malware agents. It provides a comprehensive, secure, and modular architecture for understanding malware mechanics and cybersecurity defense strategies.

An open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote administration and security testing of Windows systems.

java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。

Green-hat-suite is a tool to generate meterpreter/shell which could evade antivirus.

🐝 C段快速扫描工具 Cscan

🔮 Python Remote administration tool via telegram

PrintNightmare , Local Privilege Escalation of CVE-2021-1675 or CVE-2021-34527

Touti Cracker is a cross-platform ethical hacking toolkit for educational purposes, featuring password cracking, WiFi auditing, and reverse shell payload generation to demonstrate system vulnerabilities. It also offers a fun and neon-styled UI

一个使用java和c++编写的RAT

Gmail Hack Tool

Subscan is a simple tool for subdomain scanner, it can scan subdomains fast.

Open Source XSS exploitation tool. using http proxy to access the browser which executed js. [Engineering Experimental]

Collaborative malware exchange repository.

Advanced Keylogger / Info Grabber written in C++.

New generation phising tool.

Admin Directory Finder is a tool designed to scan and identify directories under admin paths, such as admin/dashboard.php. It helps in security testing by detecting hidden or sensitive admin panels within a web application. Ideal for penetration testers and developers to ensure proper access control and security measures.

evil mass storage *AT90USBKEY2 (poc-malware-tool for offline system)

HowToLogin is a tool that tests web application login pages for login page vulnerabilities and impelementations.