Pinned Repositories
anti-honeypot
一款可以检测WEB蜜罐并阻断请求的Chrome插件
arbitrary-php-extension
这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。
Attack-Defense-Framework
:triangular_flag_on_post: A framework for CTF Attack with Defense Mode
awvs_decode_tool
Awvs scripts decrypt
backdoorme
powerful auto-backdooring utility
Behinder
“冰蝎”动态二进制加密网站管理客户端
BlueLotus_XSSReceiver
XSS平台 CTF工具 Web安全工具
koadic
Koadic C3 COM Command & Control - JScript RAT
machine_learning_security
Source code about machine learning and security.
pupy
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python
cnrstar's Repositories
cnrstar/anti-honeypot
一款可以检测WEB蜜罐并阻断请求的Chrome插件
cnrstar/awvs_decode_tool
Awvs scripts decrypt
cnrstar/CVE-2019-2725
CVE-2019-2725 命令回显
cnrstar/d2-admin
:rainbow: An elegant dashboard
cnrstar/email_hack
A email bomb/fake email tool written by Python.
cnrstar/Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
cnrstar/exploits
Some of my exploits.
cnrstar/fastjson-1.2.47-RCE
Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法
cnrstar/gophish
Open-Source Phishing Toolkit
cnrstar/h8mail
Password Breach Hunting and Email OSINT tool, locally or using premium services. Supports chasing down related email
cnrstar/hunter
Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。
cnrstar/IIS-Raid
A native backdoor module for Microsoft IIS (Internet Information Services)
cnrstar/InScan
边界打点后的自动化渗透工具
cnrstar/K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
cnrstar/lxhToolHTTPDecrypt
HTTPDecrypt
cnrstar/macro_pack
macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
cnrstar/MS17-010-Python
MS17-010: Python and Meterpreter
cnrstar/nps
一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。
cnrstar/OneForAll
OneForAll是一款功能强大的子域收集工具
cnrstar/openedr
Open EDR public repository
cnrstar/redis-rce
Redis 4.x/5.x RCE
cnrstar/redis-rogue-server
Redis(<=5.0.5) RCE
cnrstar/RedTeam-BCS
BCS（北京网络安全大会）2019 红队行动会议重点内容
cnrstar/SafeWall
文件透明加密系统
cnrstar/TideFinger
TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。
cnrstar/tools
cnrstar/vtest
用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。
cnrstar/web_pwd_common_crack
通用web弱口令破解脚本，旨在批量检测那些没有验证码的管理后台，可用于刷分~
cnrstar/WeblogicScan
增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持
cnrstar/webshell-venom
免杀webshell无限生成工具(利用随机异或无限免杀D盾)