Pinned Repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
365-days-get-xuanwulab-job
Get a job from Xuanwu Lab in 365 days
404StarLink
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
Aggressor
Ladon for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp
AI0x0.com
An AIGC tool
airgorah
A WiFi auditing software that can perform deauth attacks and passwords cracking
alchemy
:crystal_ball: File conversion, all from the menu bar
unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Yolel's Repositories
Yolel/unicorn
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
Yolel/BBTz
BBT - Bug Bounty Tools
Yolel/Binary-search-tree
Binary search tree basic operations, including create, insert, delete, find, output.
Yolel/BypassAntiVirus
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
Yolel/CodeqlNote
Codeql学习笔记
Yolel/Coldfire
Golang malware development library
Yolel/dirmap
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
Yolel/EmulatedWechat
Yolel/fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
Yolel/GobypassAv
cs免杀上线
Yolel/GoFileBinder
golang免杀捆绑器
Yolel/Graphcis
OpenGL realize three bit transformation
Yolel/HackerMind
渗透步骤,web安全,CTF,业务安全,人工智能,区块链安全,安全开发,无线安全,社会工程学,二进制安全,移动安全,红蓝对抗,运维安全,风控安全,linux安全
Yolel/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
Yolel/jar2app
jar2app is an extremely simple, python based, command line tool to package JAR files into Mac OS applications, based off a tutorial created by Slavko Žitnik.
Yolel/JavascriptExperimit
Yolel/knock
Knock Subdomain Scan
Yolel/learning-codeql
CodeQL Java 全网最全的中文学习资料
Yolel/Mac_Tools
为了方便Mac用户参与渗透工作而创建的项目
Yolel/macOS-Security-and-Privacy-Guide
Guide to securing and improving privacy on macOS
Yolel/pypykatz
Mimikatz implementation in pure Python
Yolel/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料,内存shellcode(cs+msf)和内存马查杀工具
Yolel/ShiroAttack2
shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
Yolel/social-analyzer
API, CLI & Web App for analyzing & finding a person's profile across +1000 social media \ websites (Detections get updated regularly)
Yolel/spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
Yolel/SpringBootExploit
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
Yolel/Veil
Veil 3.1.X (Check version info in Veil at runtime)
Yolel/venom
venom - C2 shellcode generator/compiler/handler
Yolel/xortool
A tool to analyze multi-byte xor cipher
Yolel/Yasso
强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp,ssh,redis,postgres,mongodb,mssql,mysql,winrm等服务爆破,快速的端口扫描,强大的web指纹识别,各种内置服务的一键利用(包括ssh完全交互式登陆,mssql提权,redis一键利用,mysql数据库查询,winrm横向利用,多种服务利用支持socks5代理执行)