보안 · GitHub

Passive DNS Capture and Monitoring Toolkit

• Ability to use Linux's afpacket and zero-copy packet capture.
• Ability to mask IP address to enhance privacy

The open IP-fraud database that never sleeps. 1,200,000+ confirmed-malicious IPs (C2, botnets, phishing, brute force) scored and categorised, caught by our honeypot sensors and community reports, plus 219,000+ disposable email domains. Rebuilt every 30 minutes. Free, MIT, no API key.

Proxify is an automated tool that collects and updates fresh SOCKS4, SOCKS5, HTTP/HTTPS proxies and V2Ray configs from public sources. It maintains a regularly updated repository of working proxies, useful for privacy, bypassing restrictions, or network testing.

• Multi-protocol support: SOCKS4, SOCKS5, HTTP, HTTPS, and V2Ray Configurations
• Automatic updates: Regularly refreshed proxy lists

A local-only journal with serious encryption. Free, open source, and never touches the internet.

• Key file authentication: unlock your journal with an X25519 private key file instead of (or alongside) your password, like SSH keys for your journal. See docs/KEY_FILE_AUTHENTICATION.md.
• Local-only journals: create journals that auto-unlock on your device (no password prompt) while still encrypting entries at rest.

Zero-dependency TypeScript secret and PII redaction for any SDK, logs, HTTP, LLM prompts, and scoped MCP tool boundaries.

A dos (denial of service) attack for local networks using dead router attack (IPv6) and ARP attack (IPv4) simultaneously

Kernel-space x86_64 Linux rootkit leveraging kprobes and ftrace for syscall hooking (hiding entries and reverse shell backdoor)

A deauth attack that disconnects all devices from the target wifi network (2.4Ghz & 5Ghz), WPA3 also supported (PMF not tested)

灵枢（SpiritScout）｜基于 LLM 的多智能体安全测试系统，通过动态任务规划与专项智能体协作，支持 SRC 漏洞挖掘、CTF 解题与自动化渗透测试。An LLM-powered multi-agent security testing system for vulnerability research, CTF solving, and penetration testing, with dynamic task planning and parallel collaboration.