仓库/Skill 库

面向黑客、渗透测试工程师和安全研究人员的各类精选清单合集A collection of various awesome lists for hackers, pentesters and security researchers

从 Anthropic 提取的系统提示词——Claude Fable 5、Opus 4.8、Claude Code、Claude Design；OpenAI——ChatGPT 5.5 Thinking、GPT 5.5 Instant、Codex；Google——Gemini 3.5 Flash、3.1 Pro、Antigravity；以及 xAI Grok、Cursor、Copilot、VS Code、Perplexity 等。定期更新Documented system prompts from Anthropic - Claude Fable 5.1, Opus 5.5, Claude Design, Claude Code. OpenAI - ChatGPT GPT-6-Astra, Codex. Google - Gemini 3.8 Flash, 3.1 Pro, Antigravity. xAI - Grok, Grok Bot, Cursor, Kimi and more! Updated regularly.

OpenAI 的 Codex Security CLI 与 TypeScript SDK，用于发现、验证和修复安全漏洞。npm: https://www.npmjs.com/package/@openai/codex-securityOpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

Astrid OS 的权威参考：内核、capsules、host ABI、总线与安全模型。The canonical reference for Astrid OS: kernel, capsules, host ABI, the bus, and the security model. Part of Unicity Astrid OS.

Codex登陆助手：安全地在本地导出您的已登录 ChatGPT 会话配置，生成符合 Codex 规范的 auth.json 本地备份文件。

A Codex jailbreak prompt and test pack for gpt-5.6-sol. 针对 gpt-5.6 系列的 Codex 破甲提示词与测试包。

用于检查磁盘上 package、extension 与开发者工具元数据暴露面的只读开发者端点扫描器，旨在排查已知的软件供应链攻击。Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

收录公开漏洞利用 PoC 与漏洞研究技术报告的单一归档库。本人在发布时这些内容尚未被披露，欢迎自行上报并领取 CVE 编号（若获分配，权当一乐）。请勿滥用。我做这件事是为了吸引更多人进入这一领域，并且一直认为这是最高效的方式。A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

Python 终端多功能工具——OSINT、Discord、Web 与网络工具集。Rich TUI，13 种主题，支持远程更新。仅供学习使用。Python terminal multitool — OSINT, Discord, web & network utilities. Rich TUI, 13 themes, remote updates. Educational use only.

独立 iOS 应用，可在无需越狱的情况下模拟 GPS 定位。包含 Shadowrocket/Surge/Loon/QX/Stash 模块。Standalone iOS app to spoof GPS location without jailbreak. Includes Shadowrocket/Surge/Loon/QX/Stash module.

剥离多厂商 AI 来源标记：Unicode 文本卫生、统计改写钩子，以及 PNG/JPEG/SVG/PDF/DOCX/HTML/MD 中的 C2PA 与元数据。Strip multi-vendor AI provenance marks: Unicode text hygiene, statistical rewrite hooks, and C2PA/metadata from PNG/JPEG/SVG/PDF/DOCX/HTML/MD

text-humanizer 是一个开源项目，旨在将 AI 生成的文本转换为"humanized"版本。可绕过大多数 AI 检测器，如 Turnitin 或 GPTZero。text-humanizer is an open-source project designed to convert text generated by AI to its "humanized" version. Bypasses the most of AI detectors such as Turnitin or GPTZero

claude-red 是一个面向 Claude skills 系统策划的攻击性安全 skills 库。每个 skill 是一个结构化的 SKILL.md 文件，为 Claude 提供针对特定攻击面的专家级方法论，涵盖从 SQLi 到 shellcode、EDR 规避到漏洞利用开发。claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.

Silent Crypto Miner 是一款高级加密货币挖矿构建器与运行时引擎，支持多算法 CPU/GPU 调度与智能资源管理。可创建可配置算法的自定义挖矿可执行文件，输出跨平台，并提供实时监控、会话持久化、温度降频、调度与算力优化。Silent Crypto Miner is an advanced cryptocurrency mining builder and runtime engine with multi-algorithm CPU/GPU support and intelligent resource management. Create custom mining executables with configurable algorithms, cross-platform output, real-time monitoring, session persistence, thermal throttling, scheduling, and hashrate optimization.

全面解析 2026 年 8 月 GTA 6 玩法泄露事件：技术核查、暗网溯源、地图细节与诈骗警示Full breakdown of the August 2026 GTA 6 gameplay leaks, technical checks, dark web trail, map details, and scam warning.

XCutors——面向 Windows 桌面的综合性 Roblox 执行器与脚本加载器合集XCutors – A comprehensive Roblox executor and script loader collection for Windows desktops.

Wilonity Loader – 一款作弊库，带 spoofer、驱动绕过和未检测注入器，支持 20+ 游戏（RUST、CS2、Valorant、Tarkov、Warzone、PUBG、R6S、ArcRiders、Apex、Roblox、Meccha Chameleon）。具备内核伪装、HWID 清理、AC 绕过（EAC/BE/VG）功能，以及 ESP、自瞄、WH、wallhack、triggerbot、雷达、无后坐力、silent aim、chams、皮肤替换、unlock all、无扩散Wilonity Loader – cheat lib w/ spoofer, driver bypass, undetected injector for 20+ games (RUST, CS2, Valorant, Tarkov, Warzone, PUBG, R6S, ArcRiders, Apex, Roblox, Meccha Chameleon). Kernel spoof, HWID cleaner, AC bypass (EAC/BE/VG). ESP, aimbot, WH, wallhack, triggerbot, radar, no recoil, silent aim, chams, skin changer, unlock all, no spread.

每天的 AI 安全精选和论文清单（md / bib / json），附 Agent 接入说明 · AI Safety HOT

选择、测试并修改 iPhone 的上报定位。Choose, test and move an iPhone’s reported location.

Stuxnet 由本人复现，仅用于研究与教育目的，仅在 WindowsXP 与 Windows 7 上运行。Stuxnet, Here reproduced by me, Only for researchs educations purposes. It set work on WindowsXP and Windows 7 only.

用于 AML/KYT 审查的多链加密钱包风险扫描器。基于制裁名单、风险合约与资金追溯为地址打 0–100 分。集成 6 家情报源并支持故障转移，可识别骗局、黑客攻击、混币器与钓鱼攻击，支持 15+ 链、批量扫描及 TXT/JSON/CSV/HTML/PDF 报告。Python 实现，跨平台。Multi-chain crypto wallet risk scanner for AML/KYT screening. Scores addresses 0–100 using sanctions, risky contracts and fund tracing. Integrates 6 intelligence providers with failover, detects scams, hacks, mixers and phishing, supports 15+ chains, batch screening and TXT/JSON/CSV/HTML/PDF reports. Python, cross-platform.

还原你已拥有工作中被改写的原始标题。剥离 Anthropic 分配给你的 Outputs 中附加的供应商标识。Restore clean title in work you already own. Strip vendor marks from Outputs Anthropic assigned to you.

IoT 固件识别与提取。IoT firmware identification and extraction

面向 IoT 的静态扫描器，覆盖密钥、SBOM、CVE 等。IoT static scanner for secrets, SBOM, CVEs and more.

用于授权 Stellar Sentinel flags、可配置阈值与最新 flag 记录的 Soroban 合约。Soroban contract for authorized Stellar Sentinel flags, configurable thresholds, and latest-flag records.

基于 FastAPI 的服务，用于 Stellar 账户筛查、Soroban 事件监控与网络健康监测。FastAPI service for Stellar account screening, Soroban event monitoring, and network health.

GoLiveBypass — Equicord/Vencord 插件，通过在非巴西代理（Tor 或经过测试的免费代理）后启动会话来恢复巴西 Discord 用户的 Go Live 与摄像头功能。隐私与反审查工具。GoLiveBypass — Equicord/Vencord plugin that restores Go Live & camera for Brazilian Discord users by booting the session behind a non-BR proxy (Tor or tested free proxy). Privacy and anti-censorship tool.

Stellar Sentinel 仪表盘，用于 Stellar 账户筛查、网络健康监测与 Soroban 合约 flag 事件。Stellar Sentinel dashboard for Stellar account screening, network health, and Soroban contract flag events.

ChatGPT iOS 订阅 / 权益流程的安全分析（内部草稿，协调披露进行中）。Security analysis of the ChatGPT iOS subscription / entitlement flow (internal draft, coordinated disclosure WIP)

TRX Drainer Tool——面向 TRON 钱包的 TRX 与 TRC20 token 自动 drainer，具备实时余额监控、多钱包批量转出、TronLink/Trust Wallet 兼容以及隐身的能量优化交易路由。TRX Drainer Tool — Automated TRX and TRC20 token drainer for TRON wallets with real-time balance monitoring, multi-wallet sweeping, TronLink/Trust Wallet compatibility, and stealth energy-optimized transaction routing

Solana Drainer Tool——面向 Solana 钱包的 SOL 与 SPL token 自动转出工具，具备实时余额监控、多钱包批量清空、Phantom/Backpack/Solflare 兼容以及隐蔽交易路由。Solana Drainer Tool — Automated SOL and SPL token drainer for Solana wallets with real-time balance monitoring, multi-wallet sweeping, Phantom/Backpack/Solflare compatibility, and stealth transaction routing

基于 Python 的加密钱包分析工具，支持多线程地址与助记词检查（最多 50 线程）。支持 Bitcoin、Ethereum、Solana、BNB Chain、Polygon 及 EVM 网络。包含代理轮换、投资组合聚合、USD 估值、代币扫描以及 TXT/CSV/JSON 导出，适用于审计、研究与分析。Python-based crypto wallet analysis tool with multi-threaded address and seed phrase checking (up to 50 threads). Supports Bitcoin, Ethereum, Solana, BNB Chain, Polygon, and EVM networks. Includes proxy rotation, portfolio aggregation, USD valuation, token scanning, and TXT/CSV/JSON export for auditing, research, and analytics.

客户端鉴权安全审计与决策旁路集成工作台