Open-source alternatives to WeChatMsg

BongoCat is a cross-platform desktop utility that provides real-time visual feedback for keyboard and mouse activity. It functions as an interactive companion that renders an animated character on the screen, which reacts dynamically to user inputs. The application operates entirely offline, ensuring that all input processing remains local to the user environment without external network dependencies or data collection. The software distinguishes itself through a flexible asset-based rendering system that allows users to import and apply custom character designs. By intercepting low-level inp

SocialFish is a credential harvesting tool and phishing framework designed to intercept usernames, passwords, and two-factor authentication codes through deceptive web pages. It functions as a social engineering platform and information gathering tool used to collect target data and system information for security research and penetration testing. The system utilizes a reverse proxy to tunnel network traffic and capture real-time HTTP requests and session cookies. It features a live operator panel for intercepting one-time passwords and employs browser-based cloning to replicate authenticatio

This project is a command-line forensic toolkit designed for the investigation and security auditing of mobile devices. It provides a framework for collecting system logs, application data, and forensic artifacts to identify potential security breaches, unauthorized access, or evidence of malicious activity. The utility employs a modular extraction architecture that parses diverse file formats and system logs into a standardized, normalized data structure. By utilizing this unified format, the tool performs both heuristic analysis of system metadata and pattern matching against structured thr

Ruff is a high-performance static analysis and code formatting tool designed for Python. Built in Rust, it functions as a comprehensive engine that scans source code to detect programming errors, security vulnerabilities, and deviations from established coding standards. By parsing source code into a structured tree representation, it provides both automated linting and style enforcement across entire projects. The tool distinguishes itself through its speed and deep integration into the development lifecycle. It utilizes parallelized file processing to maximize throughput on large codebases

Dependencies is a static analysis utility designed to inspect Windows portable executable files and map their library dependency hierarchies. It functions as a diagnostic interface for validating library imports and identifying the specific modules required for an application to execute on a Windows system. The tool distinguishes itself by performing deep binary analysis, including the resolution of complex Windows API set schemas and forwarded export redirections. It identifies libraries loaded on demand through delay-load module analysis and performs recursive traversal to map the full tree

Covenant is a .NET-based command and control framework designed for red team operations and adversary simulation. It serves as a collaborative platform for coordinating security assessments, managing remote implants, and executing tasks on compromised systems through a centralized server. The project is distinguished by its dynamic payload generator, which compiles and obfuscates executable binaries and scripts on the fly to bypass detection. It further separates itself through a collaborative environment that allows multiple authenticated operators to share a synchronized state, track operat

Android-PIN-Bruteforce is a hardware-based automation tool designed to unlock Android device lockscreens by simulating numeric PIN entries. It functions as a USB HID input emulator that mimics a physical keyboard to send keystrokes to a target device without requiring root access or ADB. The utility is specifically designed to run on NetHunter-equipped devices for physical security auditing and device unlocking. The tool manages system lockouts by implementing progressive cooldown periods and configurable delays between input batches. It utilizes configuration-driven hardware mapping to adjus

Fake Windows logon screen to steal passwords

这是一个抓取浏览器密码的工具，后续会添加更多功能

Mimikatz is a security research suite designed for auditing Windows authentication and managing system security configurations. It provides a comprehensive framework for extracting sensitive credentials, manipulating process privileges, and managing digital identity assets directly from system memory or offline memory dumps. The project distinguishes itself through advanced system-level exploitation techniques, including runtime process injection, API hooking, and the ability to bypass cryptographic export restrictions. It features a specialized toolkit for Kerberos protocol operations, allow

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

Pillager是一个适用于后渗透期间的信息收集工具

Crack any Microsoft Windows users password without any privilege (Guest account included)

This project is a high-performance PHP framework designed for building scalable services using a resident memory execution model. By maintaining application state in memory across requests, it eliminates bootstrap overhead and provides a persistent environment for long-running processes. The framework distinguishes itself through its integrated support for durable workflow orchestration and asynchronous task management. It enables the execution of complex, long-running business processes that automatically handle failures and state recovery, alongside a background processing system that dispa

This project is a software engineering style guide and a curated collection of architectural patterns and coding standards. It provides a multi-language coding standard to ensure maintainable software across Ruby, Python, JavaScript, and Swift. The project establishes a development workflow specification for version control, continuous integration, and peer review to maintain a linear project history. It also includes a web accessibility framework based on ARIA and WCAG standards, using design tokens and semantic HTML patterns to build inclusive interfaces. The guides cover a broad range of