📦 Make security testing of K8s, Docker, and Containerd easier.
[WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐
A powerful browser crawler for web vulnerability scanners
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Conference presentation slides
An offensive/defense security toolset for discovery, recon and ethical assessment of AI Agents
A curated list of tools officially presented at Black Hat events
🔓A Curated List Of Modern Android Exploitation Conference Talks
An AI-powered Personal Identifiable Information (PII) scanner.
HTTP Request Smuggling Detection Tool
memory search and patch tool on debuggable apk without root & ndk
Rubyfu, where Ruby goes evil!
Zero-dollar attack surface management tool
Generate MITRE ATT&CK and D3FEND from a list of CVEs. Database with CVE, CWE, CAPEC, MITRE ATT&CK D3FEND and ATLAS Techniques data is updated daily. Showcased at BlackHat Europe 2025 Arsenal.
As hackers, we put a premium on function over elegance as time is always scarce. When you need to quickly create a solution to a problem, style concerns come secondary.
Query and report user logons relations from MS Windows Security Events
This tool can decrypt a BitLocker-locked partition with the TPM vulnerability
Memory modification tool for re-signed ipa supports iOS apps running on iPhone and Apple Silicon Mac without jailbreaking.
Shadow-Box: Lightweight and Practical Kernel Protector for x86 (Presented at BlackHat Asia 2017/2018, beVX 2018 and HITBSecConf 2017)