AITTAK 是一个特制的红队AI中转站平台，部署在客户端与 AI API 上游之间，用于记录请求行为、通过监控用户Prompt及工具调用结果检测敏感信息泄露、以及通过在SSE注入工具调用实现任意命令执行。
☆53Sep 19, 2026Updated last month
Alternatives and similar repositories for AITTAK
Users that are interested in AITTAK are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- java-agent内存马一键注入服务器维权工具，支持自定义路径、校验和内存马内容。☆150Oct 16, 2026Updated last week
- ghost-bits-encoder 是一个面向 Woodpecker 的辅助插件，围绕 Ghost Bits / Unicode 高位包装思路，提供通用编解码、JSON 相关编码、URL 相关编码以及若干专项辅助能力。☆56May 15, 2026Updated 5 months ago
- 使用 GO开发基于腾讯云 SCF 的IP 代理池，用于绕过 WAF IP限制，支持安全扫描工具调用。☆28Jan 27, 2026Updated 8 months ago
- KubeTrail（云迹） 是一个面向 Kubernetes 授权红队评估与防御验证的容器内态势感知、攻击面发现和 AI 辅助攻防编排工具☆70Sep 17, 2026Updated last month
- 在学习过程中的一些记录☆24Oct 5, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- 一个专注于 Java Web 特性、配置和 Trick 的安全谜题集合☆130Dec 24, 2025Updated 9 months ago
- 利用代理驱动绕过JDBC Attack检测☆144Jun 15, 2025Updated last year
- 用友的一些反序列化链子以及1day，二开了狼组的YongYouNcTool，改了一下逻辑以及poc☆133Oct 12, 2024Updated 2 years ago
- 让"WAF绕过"变得简单☆435Jan 26, 2025Updated last year
- 在xxe中使用smb外带多行内容☆111Nov 9, 2025Updated 11 months ago
- 东方隐侠团队出品，代码审计skill☆144Feb 25, 2026Updated 7 months ago
- 一个IDEA插件：一键收集项目中所有jar包依赖的工具插件。遍历项目目录收集所有jar文件，复制到all-in-one文件夹，并自动添加为项目库。☆55Oct 30, 2025Updated 11 months ago
- Wrap Gemini CLI, Antigravity, ChatGPT Codex, Claude Code, Qwen Code, iFlow as an OpenAI/Gemini/Claude/Codex compatible API service, allow…☆45Jul 2, 2026Updated 3 months ago
- ☆23May 1, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一个基于 Vineflower 引擎的多线程 Java 批量反编译工具，支持快速处理大量的 class 文件和 JAR 文件。☆59Apr 28, 2025Updated last year
- 《深入JDBC安全：特殊URL构造与不出网反序列化利用技术揭秘》对应研究总结项目 "Deep Dive into JDBC Security: Special URL Construction and Non-Networked Deserialization Explo…☆592Feb 7, 2026Updated 8 months ago
- Java bytecode line number restoration tool☆144Aug 31, 2025Updated last year
- Chrome-X 后渗透持久化与凭据监听☆39Jun 6, 2025Updated last year
- Java 字节码 facts-only 分析引擎，基于 jar-analyzer-engine 开发，把 JAR/WAR 解析成结构化 SQLite 事实库供 AI 代码审计☆20Jul 8, 2026Updated 3 months ago
- 用Go+Fyne开发的，展示JAVA序列化流以及集成一键插入脏数据,UTF过长编码绕WAF(Utf OverLoad Encoding),修改类SerializeVersionUID功能的图形化工具。☆124Jul 30, 2026Updated 2 months ago
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎，接入 Claude Code 后，你说一句"帮我审计这个网站"，AI 就能自动完成技术栈识别（1.8 万条规则覆盖 CMS/框架/CDN/中间件）、泄露扫描（阿里云 AK、GitHub Token、Webhoo…☆42Aug 19, 2026Updated 2 months ago
- proof-of-concept for generating Java deserialization payload | Proxy MemShell☆227Jun 8, 2024Updated 2 years ago
- DockerApiRCE☆241Oct 22, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 在Android Studio上搭建一套2026年最新的APP渗透环境，文章从去年年底开始构建共计耗时一个月（中间因为Android某些版本兼容性推翻了几次），这篇文章发出来了就是全部成功了🌟。☆119Jun 12, 2026Updated 4 months ago
- idea插件，快速生成反序列化中常用的方法，比如setFieldValue、createTemplatesImpl等☆28Oct 2, 2024Updated 2 years ago
- 记录一些代码审计过的源码☆182Feb 26, 2025Updated last year
- XxlJob<=2.1.2配置不当情况下反序列化RCE☆129Nov 2, 2020Updated 5 years ago
- Semantic-first multi-agent communication protocol — 4 concepts, 3 operations, infinite collaboration patterns☆27Sep 20, 2026Updated last month
- 综合后渗透方面的杂烩☆601Mar 1, 2026Updated 7 months ago
- 使用 agent 实现反序列化 utf8 overlong☆84Apr 24, 2024Updated 2 years ago
- Claude Code plugin for Java JAR security audit — 基于 jar-analyzer 的 Claude Code 安全审计插件，构建数据库，AI 深入分析☆141Mar 20, 2026Updated 7 months ago
- 用于快速启动tabby 分析漏洞或者gadget的环境☆92Jul 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 针对红队渗透智能体蜜罐☆59Oct 16, 2026Updated last week
- 基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）☆334Dec 22, 2024Updated last year
- ☆43Apr 29, 2026Updated 5 months ago
- "chanzi" is a simple and user-friendly JAVA SAST tool that utilizes taint analysis technology, includes built-in common vulnerability ru…☆490Feb 1, 2026Updated 8 months ago
- 一个使用golang编写的程序，用于测试Java应用是否受到rmi加载远程类进行代码执行的影响☆24Oct 11, 2023Updated 3 years ago
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆602May 4, 2026Updated 5 months ago
- 闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，输出从source到sink的可达路径。LLM将验证路径可达性，并根据上下文给出该路径可信分数☆507Jan 12, 2026Updated 9 months ago