OA漏洞利用工具 for exploiting vulnerabilities in various OA systems.
密探 is a penetration testing tool for asset information collection, subdomain brute-forcing, and more.
darkPulse is a Go-based shellcode packer for generating various shellcode loaders, bypassing common antivirus software.
A post-exploitation evasion tool to help users bypass AV/EDR protections.
多功能 java agent 内存马 for injecting various payloads into Java applications.
QRPhish is a script for generating and sending phishing QR codes to track user interactions.
Apache ActiveMQ Remote Code Execution (RCE) exploitation tool for specific ActiveMQ versions.
A reliable exploit + write-up to elevate privileges to root. (Tested on Ubuntu 22.04)
A command tool for executing commands in MSSQL using xp_cmdshell and sp_oacreate with various operations.
HTTP 403 bypass tool for penetration testers and bug bounty hunters, allowing for web application security audits.
A proof of concept for exploiting a remote code execution vulnerability in Kingdee ERP systems.
微信小程序辅助渗透-自动化 is an automated tool for assisting penetration testing of WeChat mini programs.
