Pinned Repositories
ADCollector
A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.
AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
Ares-RedTeam_Box
Ares RedTeam_Box 是一款面相非初级网络渗透者，可高度自定义化的工具。
cDogScan
多服务口令爆破、内网常见服务未授权访问探测，端口扫描
ChineseCommandExec
go语言执行命令中文乱码解决
crossCompile
go 交叉编译工具
GoLib
GoLib 适用于扫描器的go库
hihttps
hihttps是一款完整源码的高性能web应用防火墙，既支持传统WAF的所有功能如SQL注入、XSS、恶意漏洞扫描、密码暴力破解、CC、DDOS等ModSecurity正则规则，又支持无监督机器学习，自主对抗未知攻击。
JSP-Webshells
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
sqli-labs-master
sql注入必练习题目
workcha's Repositories
workcha/GoLib
GoLib 适用于扫描器的go库
workcha/ChineseCommandExec
go语言执行命令中文乱码解决
workcha/crossCompile
go 交叉编译工具
workcha/hihttps
hihttps是一款完整源码的高性能web应用防火墙，既支持传统WAF的所有功能如SQL注入、XSS、恶意漏洞扫描、密码暴力破解、CC、DDOS等ModSecurity正则规则，又支持无监督机器学习，自主对抗未知攻击。
workcha/AlternativeShellcodeExec
Alternative Shellcode Execution Via Callbacks
workcha/Bridge
无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。
workcha/chainsaw
Rapidly Search and Hunt through Windows Event Logs
workcha/DarkLoadLibrary
LoadLibrary for offensive operations
workcha/HackBrowserData
Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。
workcha/iMonitor
iMonitor（冰镜 - 终端行为分析系统）
workcha/javaweb_security_study_notes
java安全的学习笔记
workcha/kscan
Kscan是一款轻量级的资产发现工具，可针对IP/IP段或资产列表进行端口扫描以及TCP指纹识别和Banner抓取，在不发送更多的数据包的情况下尽可能的获取端口更多信息。 并且针对扫描结果进行自动化暴力破解，且是go平台首款开源的RDP暴力破解工具。
workcha/LaZagne
Credentials recovery project
workcha/LiqunKit_
workcha/nanodump
Dumping LSASS has never been so stealthy
workcha/Neo-reGeorg
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
workcha/nightwatch
End-to-end testing framework written in Node.js and using the Webdriver API
workcha/OffensiveAutoIt
Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitscript.com/site/autoit/)
workcha/RedTeam_BlueTeam_HW
红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具
workcha/SharpC2-1
Command and Control Framework written in C#.
workcha/SharpSocks
Tunnellable HTTP/HTTPS socks4a proxy written in C# and deployable via PowerShell
workcha/SharpUnhooker
C# Based Universal API Unhooker
workcha/Stowaway
👻Stowaway -- Multi-hop Proxy Tool for pentesters
workcha/subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
workcha/TFirewall
防火墙出网探测工具,内网穿透型socks5代理
workcha/vscan
开源、轻量、快速、跨平台 的红队(redteam)外网打点扫描器，功能 端口扫描(port scan) 指纹识别(fingerprint) nday检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)
workcha/workcha
workcha/xlsx
Go (golang) library for reading and writing XLSX files.
workcha/zinc
Zinc Search engine. A lightweight alternative to elasticsearch that requires minimal resources, written in Go.
workcha/zscan
Zscan a scan blasting tool set