izj007

DriverLoader. C

vmpdump. A dynamic VMP dumper and import fixer, powered by VTIL.

ai-relay. Serverless AI API Gateway / 无服务器 AI API 网关 · Vercel 一键部署 / Cloudflare 推送即部署 · 多 Provider 路由 · Key 轮换 · 故障转移 · OpenAI 兼容

xiaojianbang-stealth-hook. Android kernel stealth hook。安卓内核无痕hook，目前已知的所有用户态检测都无效。

waoowaoo. 首家工业级全流程 AI 影视生产平台。Industry-first professional AI Agent platform for controllable film & video production. From shorts to live-action with Hollywood-standard workflows.

UserModeHookHelper. C

VMPStatic. A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images

BreachWeave. 智能渗透Agent Manager/Observer/Solver 多角色架构，基于 pi-mono SDK。

deepdarkCTI. Collection of Cyber Threat Intelligence sources from the deep and dark web

Nidhogg. Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions.

bylibrary. 白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

new-api. A unified AI model hub for aggregation & distribution. It supports cross-converting various LLMs into OpenAI-compatible, Claude-compatible, or Gemini-compatible formats. A centralized gateway for personal and enterprise model management. 🍥

AIstudioProxyAPI. FastAPI + Playwright + Camoufox 中间层代理服务器，兼容OpenAI API且支持参数转发。项目通过浏览器自动化将API请求转发到 Google AI Studio Chat，并同样按照OpenAI标准格式返回的工具。内置调试WebUI面板。

AI-IDE-Agent. Claude/Cursor/trae AI IDE智能体提示词合集

Antigravity-Manager. Professional Antigravity Account Manager & Switcher. One-click seamless account switching for Antigravity Tools. Built with Tauri v2 + React (Rust).专业的 Antigravity 账号管理与切换工具。为 Antigravity 提供一键无缝账号切换功能。

gcli2api. 将 GeminiCLI 和 Antigravity 转换为 OpenAI 、GEMINI 和 Claude API 接口

GPT_API_free. Free ChatGPT&DeepSeek API Key，免费ChatGPT&DeepSeek API。免费接入DeepSeek API和GPT4 API，支持 gpt | deepseek | claude | gemini | grok 等排名靠前的常用大模型。

sokuji. Live speech translation powered by on-device AI and cloud providers — OpenAI, Google Gemini, Palabra.ai, Kizuna AI, Volcengine, and more

Free-Node. 每小时更新最新的Clash、v2ray节点信息

LLM-trader-test. Testing what's possible based on the Alpha Arena https://nof1.ai/ example... :) sponsor my development through the Patreon or directly via ETH! It would be much appreciated...

iMonitorSDK. The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能， 而不用关心底层驱动的开发、维护和兼容性问题，让其可以专注于业务开发

eBPFeXPLOIT. Exploit tool implemented using ebpf.

open-alpha-arena. AI paper trading project inspired by nof1 Alpha Arena, using cctx for quotation.

nof1.ai. ⚡ Open nof1.ai | Autonomous AI Trading Agent (自主AI交易系统)

AI-Trader. "AI-Trader: 100% Fully-Automated Agent-Native Trading"

open-nof1.ai. A opensource AI trading platform in real market,

vibetrading. Using different AI models(Deepseek, Qwen3, Grok, Gemini, GPT.etc) with different prompt to auto trading in real market( with hyperliquid api).

BettaFish. 微舆：人人可用的多Agent舆情分析助手，打破信息茧房，还原舆情原貌，预测未来走向，辅助决策！从0实现，不依赖任何框架。

API-Explorer. API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

nof0. NOF0 - 开源的 AI 交易竞技场

valuecell. ValueCell is a community-driven, multi-agent platform for financial applications.

AutoTrader. A Python-based development platform for automated trading systems - from backtesting to optimisation to livetrading.

1Scan. Hacking Scanner 一键渗透扫描器

ideaz-lowcode. 基于ideaz-element的低代码工具（Based on ideaz-element libary component, lowcode project）

buildadmin. 可视化生成CRUD代码、内置WEB终端、workerman常驻内存运行支持，技术栈为Vue3.x(setup)+ThinkPHP8+TypeScript+Vite+Pinia+Element Plus，自适应多端，同时提供Web和Server端、自动注册路由、无限级菜单权限节点、全局数据回收站、字段级修改保护等等，是集颜值、实用、敏捷于一身的管理系统。

dittobytes. Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

fastapi_mcp. Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!

mochat. 基于企业微信的开源SCRM应用开发框架&引擎，也是一套通用的企业私域流量管理系统!

MarketGo-SCRM. MarketGo Java 版企业微信 SCRM 系统，企业微信SCRM开发 Java SDK,支持企业微信渠道活码、客户群发、客户群群发、朋友圈等基础能力和多渠道扩展能力。

juhe-scrm. 基于Go和React的企业微信的开源 SCRM 系统。企微,个微，微信，聚合聊天，自动回复，加好友。

SCRM. 基于企业微信的SCRM系统，企微会话存档内容接入deepseek深度会话分析。

v3-admin-vite. ☀️ A crafted Vue3 admin template | Vue Admin | Vue Template | Vue3 Admin | Vue3 Template | Vue 后台 | Vue 模板 | Vue3 后台 | Vue3 模板

univer. Univer is a full-stack framework for creating and editing spreadsheets / word processor / presentation on both web and server.

springreport. SpringReport 开源 AI 报表平台，零代码拖拽搭表，多数据源适配，轻松实现智能数据分析与可视化。

IDA-NexusAI. Python

AlphabeticalPolyShellGen. Generate an Alphabetical Polymorphic Shellcode

Rshell-client. Rshell-client

xFsRedir.

inspect. dns attack in wfp

TransportAnalyzer. Simple Windows Filtering Platform kernel-mode driver designed to analyze incoming and outgoing TCP packets.

http_inspect. HTTP/HTTPS/DNS inspector (windows driver)

BehinderClientSource. ❄️冰蝎客户端源码-V4.0.6🔞

APIFinderPlus. 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查

Remote. 参考Gh0st源码，实现的一款PC远程协助软件，拥有远程Shell、文件管理、桌面管理、消息发送等功能。

WeChat-Hook. 微信 收发消息功能/ PC微信3.9.10.16 & 4.1.10.27接口 微信Hook 微信机器人 微信Hook源码 PC微信协议 PC微信协议算法

wxhelper. Hook WeChat / 微信逆向

qiweidoc. 免费开源的企微会话存档解决方案，本地化私有部署。 随时随地查看员工聊天记录，聊天记录永久保存。

BucketTool. 浏览器存储桶配置漏洞检测插件

delphimir2. Automatically exported from code.google.com/p/delphimir2

TweakMe. android免root native层与java层注入框架

FreeDomain. DigitalPlat FreeDomain: Free Domain For Everyone

fine. 网络空间资产测绘、ICP备案、天眼查股权结构图、端口扫描、指纹识别、小程序敏感信息提取。

reqable-app. Reqable issue track repo

TcpNsiKill. Simulate per-process disconnection in red team environments

SPatch-Update. Update for SPatch nightly

AndroidKillerx. 基于Android killer 1.3.1 修改

AndroidKiller4J. Java版的AndroidKiller

VirtualApp. support android 12 应用分身、模拟设备、模拟wifi、虚拟多开、钉钉打卡、企微打卡、插件开发、XP插件、模拟用户操作、java hook、c++ hook

BlackDex. BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

BlackBox. BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the application on devices. BlackBox control all virtual applications, so you can do anything you want by using BlackBox.

BlackBox. BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the application on devices. BlackBox control all virtual applications, so you can do anything you want by using BlackBox.

com.variable.apkhook. 应用伪装

FDCservers. Latest FDCservers Coupon Codes for 2025 - Organized Summary of FDCservers Promotions

DudeSuite. DudeSuite Web Security Tools

ZeroEye. 自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹

hooker. 🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.

jadx-gui-ai. jadx-gui反编译工具二次开发，接入AI赋能。

datacon24_vuln_wp. datacon比赛2024年漏洞分析赛道解题框架与运行镜像压缩包

ra2web-chronodivide-bot. 网页红警RA2WEB开源AI

prismx. :: Prism X · Automated Enterprise Network Security Risk Detection and Vulnerability Scanning Tool / 棱镜 X · 自动化企业网络安全风险检测、漏洞扫描工具

undetected-chromedriver. Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)

RmTools. 蓝队应急工具

ShellcodeDev. 基于个人习惯使用C/C++的shellcode开发项目模板

BypassAV. 一款基于PE Patch技术的后渗透免杀工具，主要支持x64

shellter.

MaLoader.

caozha-order. caozha-order是一个通用的广告（推广投放）竞价页订单管理系统，基于开源的caozha-admin开发，支持订单管理、订单回收站、产品管理、批量上传订单、批量导出订单（支持导出格式：.xls，.xlsx，.csv）、检测订单重复、竞价页的下单表单调用、客户下单时给管理员发邮件（短信）提醒等功能，内置灵活的查看订单权限设置机制。

TscanPlus_Win_Amd64_v2.2. TscanPlus_Win_Amd64_v2.2超雄版

TscanPlus. 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

PoolParty. A set of fully-undetectable process injection techniques abusing Windows Thread Pools

PartyLoader. Threadless shellcode injection tool

RmEye. 戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑

BOAZ_beta. Multilayered AV/EDR Evasion Framework (no longer actively maintained)

RedTeam-BCS. BCS（北京网络安全大会）2019 红队行动会议重点内容

LnkUtils. A utility for working with Windows shortcut (.lnk) files

EDRSandblast. C

BYOVDKit. bring your own vulnerable driver

BYOVD. BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).

yuze. A socksv5 proxy tool Written by CLang. 一款纯C实现的轻量内网穿透工具，支持正向，反向socks5代理隧道的搭建，支持跨平台使用。

Amaterasu. Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Process Explorer driver to kill a process's handles from kernel mode.

JsqSdk. This is a private project

GhostTask. A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

CaptureBAT-client. Capture BAT is a behavioral analysis tool of applications for the Win32 operating system family.

php5-vld-sg11-patch. php vld 扩展 显示sg11解密后opcode补丁

php7-vld-sg11-patch. php vld 扩展 显示sg11解密后opcode补丁

labeless. Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping and interactive Python scripting capabilities.

unlicense. Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

ProxyDll. beta

vbot. weixin-cli,qiwei-cli,微信，企微，机器人，企业微信，企微机器人，微信机器人，ipad协议，视频号下载，聚合聊天，RPA，协议，hook，逆向，群发，自动回复，API对接，稳定防封全语言通用，企业定制/SCRM/SAAS专用

BinarySpy. A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具

nft-game. game proxy implement with netfilter2

Hades-Windows. Hades HIDS/HIPS for Windows

QvPlugin-Netfilter. Qv2ray plugin that enables transparent proxy support on Windows.

desktop-windows-wfp-callout. C

flare-fakenet-ng. FakeNet-NG - Next Generation Dynamic Network Analysis Tool

obj2shellcode. shellcode生成框架

zapret. DPI bypass multi platform

FuckDPI_V2. FuckDPIv2 can fuck the Korean Government's internet censorship by fragmenting SSL ClientHello.

httpsMitm. C

WinDivertTunnel. port reuser using windivert

WinDivertProxy. Proxy any program via WinDivert to a specific server

CoinTrader. OKX平台自动化交易框架，量化交易框架

DSEFix. Windows x64 Driver Signature Enforcement Overrider

Mhyprot2DrvControl. A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process.

HookSigntool. C

-Custom-Call-Stacks-. 自定义堆栈调用的demo 【使用于VS2022】

ObjToShellCode. Rapid generation ShellCode

wfp. C++

LookDrvCode. LookDrvCode

Windows-driver-samples. This repo contains driver samples prepared for use with Microsoft Visual Studio and the Windows Driver Kit (WDK). It contains both Universal Windows Driver and desktop-only driver samples.

CS-AutoPostChain. 基于 OPSEC 的 CobaltStrike 后渗透自动化链

kill360. kill360

kill-360. 一个样本，通过模拟过父占用vt的方式削弱360，之后到达kill360的目的

AlphaGolang. IDApython Scripts for Analyzing Golang Binaries

STFUEDR. Silence EDRs by removing kernel callbacks

Yagi. Yet Another Ghidra Integration for IDA

Driver-Anti-virus-GooseBt. Developing GooseBt Anti-virus Framework

Driver.

YDArk. X64内核小工具

s4killer.

Micro8. Gitbook

superSearchPlus. superSearchPlus是聚合型信息收集插件，支持综合查询，资产测绘查询，信息收集 敏感信息提取 js资源扫描 目录扫描 vue组件扫描 整合了目前常见的资产测绘平台 专为白帽子提供快速侦测目标。

drizzleDumper. drizzleDumper是一款基于内存搜索的Android脱壳工具。

WeChatOpenDevTools-Python. WeChatOpenDevTool 微信小程序强制开启开发者工具

SharpThief. 一键提取exe的图标、嵌入图标、资源信息、版本信息、修改时间、数字签名，降低程序熵值

campus-imaotai. i茅台app自动预约，每日自动预约，支持docker一键部署（本项目不提供成品，使用的是已淘汰的算法）

RuoYi-v4.7.8-RCE-POC.

E-debug-plus. 易语言辅助调试工具:https://github.com/fjqisba/E-debug

E-Debug. X64Dbg插件，分析易语言必备神器

Stardust. A modern 32/64-bit position independent implant template

LdrLibraryEx. A small x64 library to load dll's into memory.

RedPersist. C#

proxypin. Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems

ReflectiveDLLInjection. Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

sRDI. Python

ShellCodeFrame. 使用纯C/C++编写的ShellCode生成框架

PIShellcode. Position-Independent Shellcode Loader

exe2shellcode. Remote Download and Memory Execute for shellcode framework

KittyStager. KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to be able to have a web server and some kitten and be able to use the with any shellcode.

TrueSightKiller. AV/EDR killer leveraging vulnerable kernel drivers

PentestGPT. Automated Penetration Testing Agentic Framework Powered by Large Language Models

note. PowerShell

Khazan. 一个 CS shellcode 生成器

StagerDemo. 一个demo

xssplatform. 一个经典的XSS渗透管理平台

Memoryshell-JavaALL. 收集内存马打入方式

ShiroExp. shiro综合利用工具

Deskbypass.

vagent. 多功能 java agent 内存马

SpringBootExploit. 项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

cloudTools. 云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

NextChat. ✨ Light and Fast AI Assistant. Support: Web | iOS | MacOS | Android | Linux | Windows

AgentInjectTool. 改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能

BlueTeamTools. 蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

MDUT. MDUT - Multiple Database Utilization Tools

mysql-fake-server. 纯 Java 实现的 MySQL Fake Server | 支持 GUI 版和命令行版 | 支持反序列化和文件读取的利用方式 | 支持常见的 GADGET 和自定义 GADGET 数据 | 根据目标环境自动生成匹配的 PAYLOAD | 支持 PGSQL 和 DERBY 的利用

jar-analyzer-v1-gui. 建议使用新版：https://github.com/jar-analyzer/jar-analyzer

OA-vulnerability-tool. 包括（致远，泛微，通达，用友，万户，蓝凌），常见的oa漏洞均可检测

YongYouNcTool. 用友NC系列漏洞检测利用工具，支持一键检测、命令执行回显、文件落地、一键打入内存马、文件读取等

ShiroAttack2. 一款针对Shiro550漏洞进行快速漏洞利用工具。 对 @SummerSec 大佬的项目https://github.com/SummerSec/ShiroAttack2 进行了一些改进。

2023Hvv. 2023 HVV情报速递~

china-operator-ip. 中国运营商IPv4/IPv6地址库-每日更新

Beta. Beta versions of my software

JspEncounter. Java

CTFd_with_CTFd-whale. This repository is used to provide a reference for CTF dynamic target machine

Windows-API-Hashing. This is a simple example and explanation of obfuscating API resolution via hashing

blackJack. 重点系统指纹识别的工具

EDRs. C

ReflectiveNtdll. A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

GlllPowerloader. 绕过AV/EDR的代码例子（Code example to bypass AV/EDR）

Network-Reinstall-System-Modify. It can reinstall CentOS, Debian, Ubuntu, Windows 2003, 7, 2008R2, 2012R2, 2016, 2019 and other systems (continuously added) via the Internet, and can install any system via mounting remote network ISO.

anhkgg-tools. Anhkgg's Tools

SuperDllHijack. SuperDllHijack：A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术，不再需要手工导出Dll的函数接口了

BOFRunPortable. BOF内存运行exe

iatHijackGenerate. 白加黑的快速生成器（针对IAT类型）

Shellcode-Hide. This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

venom-rs. Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)

NtDump. Indirect NT syscalls LSASS dumper.

RecycledInjector. Native Syscalls Shellcode Injector

RecycledGate. Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll