HankleHigh's Stars
icsharpcode/ILSpy
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
moonD4rk/HackBrowserData
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
EmpireProject/Empire
Empire is a PowerShell and Python post-exploitation agent.
LandGrey/SpringBootVulExploit
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
TideSec/BypassAntiVirus
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
danielbohannon/Invoke-Obfuscation
PowerShell Obfuscator
trustedsec/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
LandGrey/pydictor
A powerful and useful hacker dictionary builder for a brute-force attack
pwntester/ysoserial.net
Deserialization payload generator for a variety of .NET formatters
GrrrDog/Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
dafthack/CloudPentestCheatsheets
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
knownsec/ksubdomain
无状态子域名爆破工具
inonshk/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
kgretzky/pwndrop
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
w-digital-scanner/w13scan
Passive Security Scanner (被动式安全扫描器)
40t/go-sniffer
🔎Sniffing and parsing mysql,redis,http,mongodb etc protocol. 抓包截取项目中的数据库请求并解析成相应的语句。
bowu678/php_bugs
PHP代码审计分段讲解
0xthirteen/SharpRDP
Remote Desktop Protocol .NET Console Application for Authenticated Command Execution
awake1t/PortBrute
一款跨平台小巧的端口爆破工具,支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD
UBoat-Botnet/UBoat
HTTP Botnet
EtherDream/anti-portscan
使用 iptables 防止端口扫描
uknowsec/SweetPotato
Modifying SweetPotato to support load shellcode and webshell
hanc00l/weblogic_unserialize_exploit
java unserialize vul for weblogic exploit
hayasec/reGeorg-Weblogic
reGeorg的特殊版本,适用于老版本weblogic。
ILLKX/Windows-VirtIO
Windows原版镜像(带VirtIO)
blackwolfsec/online-checker
An adaptive URL online checker for python2 and python3
yuxiaokui/go-shellcode
Load shellcode into a new process
HankleHigh/CVE-2020-0787-EXP-ALL-WINDOWS-VERSION
Support ALL Windows Version