April-ops-lite's Stars
microsoft/terminal
The new Windows Terminal and the original Windows console host, all in the same place!
mantvydasb/RedTeaming-Tactics-and-Techniques
Red Teaming Tactics and Techniques
Ne0nd0g/merlin
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
MrWQ/vulnerability-paper
收集的文章 https://mrwq.github.io/tools/paper/
hosch3n/ProxyVulns
[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.
MobSF/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
trustedsec/social-engineer-toolkit
The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.
BREAKTEAM/Debcrypt
A script crack bcrypt hash.
gedoor/legado
Legado 3.0 Book Reader with powerful controls & full functions❤️阅读3.0, 阅读是一款可以自定义来源阅读网络内容的工具,为广大网络文学爱好者提供一种方便、快捷舒适的试读体验。
hectorqin/reader
阅读3服务器版,桌面端,iOS可用。后端 Kotlin + Spring Boot + Vert.x + Coroutine ;前端 Vue.js + Element。麻烦点点star,关注一下公众号【假装大佬】❗️ Demo服务器由于未备案已被关停,建议自行搭建
wyzxxz/jndi_tool
JNDI服务利用工具 RMI/LDAP,支持部分场景回显、内存shell,高版本JDK场景下利用等,fastjson rce命令执行,log4j rce命令执行 漏洞检测辅助工具
wyzxxz/shiro_rce_tool
shiro 反序列 命令执行辅助检测工具
ShutdownRepo/smartbrute
Password spraying and bruteforcing tool for Active Directory Domain Services
chenjj/CORScanner
🎯 Fast CORS misconfiguration vulnerabilities scanner
maurosoria/dirsearch
Web path scanner
sliverarmory/Certify
Active Directory certificate abuse.
CCob/SweetPotato
Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
frohoff/ysoserial
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
mbechler/marshalsec
PeiQi0/PeiQi-WIKI-Book
面向网络安全从业者的知识文库🍃
0x727/SpringBootExploit
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
tr0uble-mAker/POC-bomber
利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
laramies/theHarvester
E-mails, subdomains and names Harvester - OSINT
peass-ng/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
rapid7/metasploit-framework
Metasploit Framework
sense-of-security/ADRecon
ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.
BloodHoundAD/BloodHound
Six Degrees of Domain Admin
infosecn1nja/AD-Attack-Defense
Attack and defend active directory using modern post exploitation adversary tradecraft activity
LandGrey/SpringBootVulExploit
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list