beiguoyidao's Stars
EmpireProject/Empire
Empire is a PowerShell and Python post-exploitation agent.
fortra/impacket
Impacket is a collection of Python classes for working with network protocols.
LyleMi/Learn-Web-Hacking
Study Notes For Web Hacking / Web安全学习笔记
RowTeam/SharpDecryptPwd
SharpDecryptPwd source, To Decrypt Navicat,Xmanager,Filezilla,Foxmail,WinSCP,etc
t3l3machus/toxssin
An XSS exploitation command-line interface and payload generator.
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
beiguoyidao/captcha-killer
burp验证码识别接口调用插件
c0ny1/captcha-killer
burp验证码识别接口调用插件
poerschke/Uniscan
Uniscan web vulnerability scanner
spinkham/skipfish
Web application security scanner created by lcamtuf for google - Unofficial Mirror
gentilkiwi/mimikatz
A little tool to play with Windows security
Sysinternals/ProcDump-for-Linux
A Linux version of the ProcDump Sysinternals tool
d3ckx1/OLa
zhuifengshaonianhanlu/pikachu
一个好玩的Web安全-漏洞测试平台
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
rsmudge/ElevateKit
The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.
Audi-1/sqli-labs
SQLI labs to test error based, Blind boolean based, Time based.
k8gege/K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
wgpsec/DBJ
大宝剑-边界资产梳理工具(红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配)
DawnFlame/POChouse
POC&EXP仓库、hvv弹药库、Nday、1day
lgandx/Responder
Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
youki992/matoi
matoi渗透测试辅助工具,基于Flask框架
PowerShellMafia/PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
DominicBreuker/pspy
Monitor linux processes without root permissions
aleenzz/MYSQL_SQL_BYPASS_WIKI
mysql注入,bypass的一些心得
3had0w/Fuzzing-Dicts
Web Security Dictionary
makoto56/penetration-suite-toolkit
本项目制作的初衷是帮助渗透新手快速搭建工作环境,工欲善其事,必先利其器。
AlessandroZ/LaZagne
Credentials recovery project
Veil-Framework/Veil
Veil 3.1.X (Check version info in Veil at runtime)
lucky-ecat/wechat_info_collect
调查取证 | 针对微信客户端的信息收集工具, 自动化提取本地PC所有的微信信息, 包括微信号, 手机号等