i-liberty's Stars
rootclay/WMIHACKER
A Bypass Anti-virus Software Lateral Movement Command Execution Tool
TheKingOfDuck/burpFakeIP
服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件
k8gege/Ladon
Ladon大型内网渗透工具,可PowerShell模块化、可CS插件化、可内存加载,无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell,支持批量A段/B段/C段以及跨网段扫描,支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息,高危漏洞检测16个含MS17010、Zimbra、Exchange
sussurro/BetterTorch
A more obfuscated CactusTorch targeted towards office
evilgurren/SQLWatch
SQL injection detection engine by tokenzing and syntax analysis, like SQLChop
rasta-mouse/Watson
Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
rebeyond/memShell
a webshell resides in the memory of java web server
FuzzySecurity/PSKernel-Primitives
Exploit primitives for PowerShell