DioLin's Stars
Cryin/JavaID
java source code static code analysis and danger function identify prog
swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
rasta-mouse/Sherlock
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
samratashok/nishang
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
maaaaz/impacket-examples-windows
The great impacket example scripts compiled for Windows
PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
togie6/Windows-Privesc
Basics of Windows privilege escalation
offensive-security/exploitdb
The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb
codingo/OSCP-2
Collection of things made during my OSCP journey
ohpe/juicy-potato
A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
cube0x0/CVE-2021-1675
C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
calebstewart/CVE-2021-1675
Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
GTFOBins/GTFOBins.github.io
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
peass-ng/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
Funny-Systems-OSS/cloudsql-proxy-hardening
Cloud SQL Proxy works with encrypted credential file.
0x09AL/IIS-Raid
A native backdoor module for Microsoft IIS (Internet Information Services)
Tib3rius/AutoRecon
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
21y4d/nmapAutomator
A script that you can run in the background!
OlivierLaflamme/Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
evets007/OSCP-Prep-cheatsheet
orangetw/My-Presentation-Slides
Collections of Orange Tsai's public presentation slides.
vnpy/vnpy
基于Python的开源量化交易平台开发框架
Qftm/Information_Collection_Handbook
Handbook of information collection for penetration testing and src
xiaoy-sec/Pentest_Note
渗透测试常规操作记录
KingOfBugbounty/KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
dwisiswant0/awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
xmendez/wfuzz
Web application fuzzer
anasbousselham/fortiscan
A high performance FortiGate SSL-VPN vulnerability scanning and exploitation tool.
Freakboy/CobaltStrike
CobaltStrike's source code
pureqh/webshell
免杀webshell生成工具