DioLin's Stars
SusmithKrishnan/torghost
TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise your identity.
TheSpeedX/PROXY-List
Get PROXY List that gets updated everyday
RUB-NDS/PRET
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
A-poc/RedTeam-Tools
Tools and Techniques for Red Team / Penetration Testing
madhuakula/kubernetes-goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
RhinoSecurityLabs/cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
iknowjason/Awesome-CloudSec-Labs
Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.
lijiejie/BBScan
A fast vulnerability scanner helps pentesters pinpoint possibly vulnerable targets from a large number of web servers
al0ne/Vxscan
python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
s7ckTeam/Glass
Glass是一款针对资产列表的快速指纹识别工具,通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹,也可针对IP/IP段或资产列表进行快速的指纹识别。
s7ckTeam/Photostudio
Photostudio是一款能进行自动化检测网页存活并实时给网页拍照的工具,通过调用Fofa/Zoomeye/360qua/shodan等 Api快速准确查询资产并进行网页截图,从而实施进一步的信息筛查。
veo/wsMemShell
WebSocket 内存马/Webshell,一种新型内存马/WebShell技术
go-gost/gost
GO Simple Tunnel - a simple tunnel written in golang
klezVirus/inceptor
Template-Driven AV/EDR Evasion Framework
mkaring/ConfuserEx
An open-source, free protector for .NET applications
infosecn1nja/Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
sml2h3/ddddocr
带带弟弟 通用验证码识别OCR pypi版
antonioCoco/SharPyShell
SharPyShell - tiny and obfuscated ASP.NET webshell for C# web applications
nlitsme/ubidump
Tool for viewing and extracting files from an UBIFS image
nemesida-waf/waf-bypass
Check your WAF before an attacker does
horizon3ai/CVE-2023-27524
Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset
opsdisk/pagodo
pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching
m3n0sd0n4ld/uDork
uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.
larsbrinkhoff/httptunnel
Bidirectional data stream tunnelled in HTTP requests.
TheKingOfDuck/burpFakeIP
服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件
RustScan/RustScan
🤖 The Modern Port Scanner 🤖
nomi-sec/PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
maurosoria/dirsearch
Web path scanner
SaadAhla/FilelessPELoader
Loading Remote AES Encrypted PE in memory , Decrypted it and run it
matro7sh/BypassAV
This map lists the essential techniques to bypass anti-virus and EDR