Feb30th

Feb30th's Stars

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP59.9k1.9k27424.1k

• vulhub/vulhub

  Pre-Built Vulnerable Environments Based on Docker-Compose

  Language:Dockerfile18.1k5801864.5k

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go13k1595221.3k

• The-Z-Labs/linux-exploit-suggester

  Linux privilege escalation auditing tool

  Language:Shell5.7k127321.1k

• rmusser01/Infosec_Reference

  An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

  Language:CSS5.6k264171.2k

• s0md3v/Arjun

  HTTP parameter discovery suite.

  Language:Python5.4k87149803

• SecWiki/linux-kernel-exploits

  linux-kernel-exploits Linux平台提权漏洞集合

  Language:C5.3k28741.7k

• andrew-d/static-binaries

  Various *nix tools built as statically-linked binaries

  Language:Shell3.2k6636582

• lijiejie/GitHack

  A `.git` folder disclosure exploit

  Language:Python3.2k8622799

• googleprojectzero/sandbox-attacksurface-analysis-tools

  Set of tools to analyze Windows sandboxes for exposed attack surface.

  Language:C#2.1k12136437

• Dliv3/Venom

  Venom - A Multi-hop Proxy for Penetration Testers

  Language:Go2k4121354

• SecWiki/CMS-Hunter

  CMS漏洞测试用例集合

  Language:PHP1.7k1062522

• dirkjanm/ldapdomaindump

  Active Directory information dumper via LDAP

  Language:Python1.2k3243194

• lucyoa/kernel-exploits

  Language:C1.1k461300

• sv3nbeast/ShiroScan

  Shiro<=1.2.4反序列化，一键检测工具

  Language:Python97986143

• Ridter/redis-rce

  Redis 4.x/5.x RCE

  Language:Python94160222

• ly4k/CurveBall

  PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)

  Language:Ruby886334265

• itm4n/VBA-RunPE

  A VBA implementation of the RunPE technique or how to bypass application whitelisting.

  Language:VBA792288179

• gdedrouas/Exchange-AD-Privesc

  Exchange privilege escalations to Active Directory

  Language:PowerShell741261115

• ilmila/J2EEScan

  J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

  Language:Java6503619186

• BloodHoundAD/SharpHound3

  C# Data Collector for the BloodHound Project, Version 3

  Language:C#5222525157

• BloodHoundAD/SharpHound2

  The Old BloodHound C# Ingestor (Deprecated)

  Language:C#5103960113

• skelsec/msldap

  LDAP library for auditing MS AD

  Language:Python37292065

• BuildHackSecure/gitscraper

  A tool which scrapes public github repositories for common naming conventions in variables, folders and files

  28910251

• n0b0dyCN/RedisModules-ExecuteCommand

  Tools, utilities and scripts to help you write redis modules!

  Language:C26420100

• feihong-cs/JspMaster-Deprecated

  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密

  Language:Java2162234

• securifybv/ShellLink

  A .NET Class Library for processing ShellLink (LNK) files

  Language:C#19011439

• williballenthin/python-sdb

  Pure Python parser for Application Compatibility Shim Databases (.sdb files)

  Language:Python10712026

• jackson5sec/ShimDB

  Shim database persistence (Fin7 TTP)

  Language:C366010

• kenb123/Basic-Expression-Lexicon-Variation-Algorithms-BELVA

  Generate and Permutate Context Aware Dictionaries for Application Testing

  Language:Python115010