814561039 Goto Github PK

alb

攻击日志分析工具

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

attck-pentester-book

ATTCK-PenTester-Book

awesome-cpp-cn

C++ 资源大全中文版，标准库、Web应用框架、人工智能、数据库、图片处理、机器学习、日志、代码分析等

awesome-cve-poc

✍️ A curated list of CVE PoCs.

behinder

“冰蝎”动态二进制加密网站管理客户端

blasting_dictionary

爆破字典

book

book

brute

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chinese-translation-att-ck-framework

ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可

cknife

Cknife

cms_poc_exp

cms漏洞插件搜集(一起来搜集)

cobalt_strike_wiki

Cobalt Strike系列

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

empire

Empire is a PowerShell and Python post-exploitation agent.

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fuzz-dic

文件上传、目录爆破等Fuzz字典

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

getpass

a mini tool to dump password and NTLM hash from WDigest & MSV1_0 & tspkg, as a result of study of mimikatz

hook-passwordchangenotify

Stealing passwords every time they change

htran

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

iox

Tool for port forward & intranet proxy, just like lcx/ew, but better

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kekeo

A little toolbox to play with Microsoft Kerberos in C

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

lazagne

Credentials recovery project

lcx

自修改免杀lcx端口转发工具

log-analysis

日志分析工具

micro8

Gitbook