CandyYQ's Stars
linshaoSec/WaterExp
WaterExp:面向安服仔的 水报告模板和工具
MountCloud/FireKylin
🔥火麒麟-网络安全应急响应工具(系统痕迹采集)Cybersecurity emergency response tool.👍👍👍
tr0uble-mAker/POC-bomber
利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
Ares-X/shiro-exploit
Shiro反序列化利用工具,支持新版本(AES-GCM)Shiro的key爆破,配合ysoserial,生成回显Payload
k8gege/Aggressor
Ladon 911 for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp
k8gege/Ladon
Ladon大型内网渗透工具,可PowerShell模块化、可CS插件化、可内存加载,无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell,支持批量A段/B段/C段以及跨网段扫描,支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息,高危漏洞检测16个含MS17010、Zimbra、Exchange
j3ers3/Cscan
🐝 C段快速扫描工具 Cscan
SummerSec/ShiroAttack2
shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
BeichenDream/Godzilla
哥斯拉
Liqunkit/LiqunShield
下架
Liqunkit/LiqunKit_
下架
lcvvvv/kscan
Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。支持协议1200+,协议指纹10000+,应用指纹20000+,暴力破解协议10余种。
aboul3la/Sublist3r
Fast subdomains enumeration tool for penetration testers
wgpsec/fofa_viewer
A simple FOFA client written in JavaFX. Made by WgpSec, Maintained by f1ashine.
xdmjun/wxappUnpacker
we1h0/redteam-tips
关于红队方面的学习资料
coreybutler/nvm-windows
A node.js version management utility for Windows. Ironically written in Go.
rshipp/awesome-malware-analysis
Defund the Police.
fortra/impacket
Impacket is a collection of Python classes for working with network protocols.
deibit/cansina
Web Content Discovery Tool
H4ckForJob/dirmap
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
DingGuodong/LinuxBashShellScriptForOps
Linux Bash Shell Script and Python Script For Ops and Devops
Qftm/Information_Collection_Handbook
Handbook of information collection for penetration testing and src
SuperKieran/WooyunDrops
Wooyun知识库,乌云知识库,https://wooyun.kieran.top
lmammino/jwt-cracker
Simple HS256, HS384 & HS512 JWT token brute force cracker.
c0ny1/sqlmap4burp-plus-plus
sqlmap4burp++是一款兼容Windows,mac,linux多个系统平台的Burp与sqlmap联动插件
tomnomnom/assetfinder
Find domains and subdomains related to a given domain
BlackHole1/autoFindXssAndCsrf
自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Bypass007/Emergency-Response-Notes
应急响应实战笔记,一个安全工程师的自我修养。