CandyYQ

CandyYQ's Stars

• linshaoSec/WaterExp

  WaterExp:面向安服仔的 水报告模板和工具

  Language:Python59757

• MountCloud/FireKylin

  🔥火麒麟-网络安全应急响应工具(系统痕迹采集)Cybersecurity emergency response tool.👍👍👍

  764123

• tr0uble-mAker/POC-bomber

  利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

  Language:Python2.2k374

• Ares-X/shiro-exploit

  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

  Language:Python872122

• k8gege/Aggressor

  Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp

  975189

• k8gege/Ladon

  Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange

  Language:PowerShell4.8k859

• j3ers3/Cscan

  🐝 C段快速扫描工具 Cscan

  Language:Python9521

• SummerSec/ShiroAttack2

  shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

  Language:Java2k261

• BeichenDream/Godzilla

  哥斯拉

  3.8k527

• Liqunkit/LiqunShield

  下架

  14121

• Liqunkit/LiqunKit_

  下架

  37076

• lcvvvv/kscan

  Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

  Language:Go3.9k511

• aboul3la/Sublist3r

  Fast subdomains enumeration tool for penetration testers

  Language:Python9.6k2.1k

• wgpsec/fofa_viewer

  A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.

  Language:Java1.6k154

• xdmjun/wxappUnpacker

  2.4k1.4k

• we1h0/redteam-tips

  关于红队方面的学习资料

  1.1k181

• coreybutler/nvm-windows

  A node.js version management utility for Windows. Ironically written in Go.

  Language:Go36.8k3.3k

• rshipp/awesome-malware-analysis

  Defund the Police.

  11.6k2.5k

• fortra/impacket

  Impacket is a collection of Python classes for working with network protocols.

  Language:Python13.2k3.5k

• deibit/cansina

  Web Content Discovery Tool

  Language:Python880238

• H4ckForJob/dirmap

  An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

  Language:Python3.1k546

• DingGuodong/LinuxBashShellScriptForOps

  Linux Bash Shell Script and Python Script For Ops and Devops

  Language:Python440314

• Qftm/Information_Collection_Handbook

  Handbook of information collection for penetration testing and src

  796157

• SuperKieran/WooyunDrops

  Wooyun知识库，乌云知识库，https://wooyun.kieran.top

  Language:HTML601334

• lmammino/jwt-cracker

  Simple HS256, HS384 & HS512 JWT token brute force cracker.

  Language:JavaScript988156

• c0ny1/sqlmap4burp-plus-plus

  sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

  Language:Java73578

• tomnomnom/assetfinder

  Find domains and subdomains related to a given domain

  Language:Go3k474

• BlackHole1/autoFindXssAndCsrf

  自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)

  Language:JavaScript13640

• chaitin/xray

  一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

  Language:Vue10.2k1.8k

• Bypass007/Emergency-Response-Notes

  应急响应实战笔记，一个安全工程师的自我修养。

  5.1k1.3k