lakemoon602's Stars
whwlsfb/JDumpSpider
HeapDump敏感信息提取工具
Mr-xn/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
cdk-team/CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
mthbernardes/sshLooterC
It's the C version of https://github.com/mthbernardes/sshLooter
Metarget/metarget
Metarget is a framework providing automatic constructions of vulnerable infrastructures.
YDCloudSecurity/cloud-security-guides
Esonhugh/Attack_Code
文章 Attack Code 的详细全文。安全和开发总是具有伴生属性,尤其是云的安全方向,本篇文章是希望能帮助到读者的云安全入门材料。Full text of the article Attack Code. Security and development always have concomitant attributes, and this is especially true with the security direction of the cloud. This article is an introduction to cloud security that I hope will help readers.
CreditTone/hooker
🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe、disable ssl pinning
Y4er/ysoserial
ysoserial修改版,着重修改ysoserial.payloads.util.Gadgets.createTemplatesImpl使其可以通过引入自定义class的形式来执行命令、内存马、反序列化回显。
LandGrey/spring-boot-upload-file-lead-to-rce-tricks
spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
huaigu4ng/SysWhispers3WinHttp
Syscall免杀
SafeGroceryStore/MDUT
MDUT - Multiple Database Utilization Tools
Rvn0xsy/red-tldr
red-tldr is a lightweight text search tool, which is used to help red team staff quickly find the commands and key points they want to execute, so it is more suitable for use by red team personnel with certain experience.
Threekiii/Awesome-POC
一个漏洞POC知识库 目前数量 1000+
zema1/suo5
一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool
0xHossam/Killer
Killer tool is designed to bypass AV/EDR security tools using various evasive techniques.
BeichenDream/GodPotato
QAX-A-Team/BrowserGhost
这是一个抓取浏览器密码的工具,后续会添加更多功能
peass-ng/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
biggerduck/RedTeamNotes
红队笔记
lucksec/RedTeamNotes
红队笔记
hfiref0x/UACME
Defeating Windows User Account Control
midisec/BypassAnti-Virus
免杀姿势学习、记录、复现。
snail007/goproxy
🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。
boolangery/py-lua-parser
A Lua parser and AST builder written in Python.
h4m5t/Sec-Interview
Web安全工程师/信息安全工程师/渗透测试工程师 面试题库
pascal-lab/Tai-e-assignments
Tai-e assignments for static program analysis
trickest/inventory
Asset inventory of over 800 public bug bounty programs.
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
MatrixTM/MHDDoS
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods