Rfsdj's Stars
k8gege/K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
hackerhouse-opensource/iscsicpl_bypassUAC
UAC bypass for x64 Windows 7 - 11
projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
alsyundawy/Parallels
Parallels Desktop for mac
Lotus6/AutoRepeater
Burp插件,自动化挖掘SSRF,Redirect,Sqli漏洞,自定义匹配参数
mufeedvh/moonwalk
Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
arwes/arwes
Futuristic Sci-Fi UI Web Framework.
EdgeSecurityTeam/EHole
EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具
Cl0udG0d/Fofa-hack
非付费会员,fofa数据采集工具
lemonlove7/dirsearch_bypass403
目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别
emo-crab/observer_ward
侦查守卫(observer_ward)Web应用和服务指纹识别工具
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
Ascotbe/Kernelhub
:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
arch3rPro/Pentest-Windows
Windows11 Penetration Suite Toolkit 一个开箱即用的windows渗透测试环境
callmefeifei/SvnHack
一个Svn信息泄露辅助工具,可以使用这个脚本列取网站目录,读取源码文件以及下载整站代码。
inbug-team/SweetBabyScan
Red Tools 渗透测试
ReAbout/web-sec
WEB安全手册(红队安全技能栈),漏洞理解,漏洞利用,代码审计和渗透测试总结。【持续更新】
wizardforcel/mst-sec-lecture-notes
:book:【停】米斯特白帽培训讲义
vanhauser-thc/thc-hydra
hydra
soxoj/maigret
🕵️♂️ Collect a dossier on a person by username from thousands of sites
epi052/feroxbuster
A fast, simple, recursive content discovery tool written in Rust.
aleenzz/MYSQL_SQL_BYPASS_WIKI
mysql注入,bypass的一些心得
lijin-THU/notes-python
中文 Python 笔记
pingc0y/URLFinder
一款快速、全面、易用的页面信息提取工具,可快速发现和提取页面中的JS、URL和敏感信息。
Mr-xn/BurpSuite-collections
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
Mr-xn/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
komomon/Komo
🚀Komo, a comprehensive asset collection and vulnerability scanning tool. Komo 一个综合资产收集和漏洞扫描工具,集成了20余款工具,通过多种方式对子域进行获取,收集域名邮箱,进行存活探测,域名指纹识别,域名反查ip,ip端口扫描,web服务链接爬取并发送给xray,对web服务进行POC漏洞扫描,对主机进行主机漏洞扫描。
xtekky/gpt4free
The official gpt4free repository | various collection of powerful language models
tennc/webshell
This is a webshell open source project
chaitin/xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档