b0han711 Goto Github PK

jndiexploit

A malicious LDAP server for JNDI injection attacks

jscat

JScript RAT

jumpserver

Jumpserver是全球首款完全开源的堡垒机，是符合 4A 的专业运维审计系统。

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

keywords

kubeoperator

KubeOperator 是一个开源项目，通过 Web UI 在 VMware、OpenStack、物理机上一键部署和管理生产级别的 Kubernetes 集群。

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

lindb

LinDB is a scalable, distributed, high performance, high availability Time Series Database.

linux

linux安全检查

linuxcheck

linux信息收集/应急响应/常见后门/挖矿检测/webshell检测脚本

log4j-fuzz-head-poc

批量检测log4j漏洞，主要还是批量fuzzz 头

log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

mailinabox

Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.

markdown-resume

⭐️ Markdown 简历模版

micro8

Gitbook

microsoft-activation-scripts

A collection of scripts for activating Microsoft products using HWID / KMS38 / Online KMS activation methods with a focus on open-source code, less antivirus detection and user-friendliness.

mind-map

超详细的渗透测试思维导图

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

notepad-plus-plus

Notepad++ official repository

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

openrasp-golang

openrasp-iast

IAST 灰盒扫描工具

osctrl

Fast and efficient osquery management

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

passive-scan-client

Burp被动扫描流量转发插件

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcc_2e

Online resources for Python Crash Course (Second Edition), from No Starch Press

penetration_testing_poc

渗透测试有关的POC、脚本、提权小工具等，欢迎补充、完善

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker