flywithoutwings Goto Github PK

-

搜集有关渗透测试中用到的POC、脚本、工具、文章等姿势分享

2017-11882_generator

office漏洞CVE-2017-11882 File Generator PoC

3gstudent.github.io

blog

aclight

枚举Active Directory中所有用户的ACL，标记出特权帐户。A script for advanced discovery of Privileged Accounts - includes Shadow Admins

aioscan_cve-2020-0796

基于asyncio（协程）的CVE-2020-0796 速度还是十分可观的，方便运维师傅们对内网做下快速检测。

ajpy

akkariiin-shadowsocksr-android

Maintained by shadowsocksrr

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

applicationinspector

一款功能强大的软件源代码分析与审计工具A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'what's in it' using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

arbitrium-rat

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

aria2

aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink.

ary

Ary 是一个集成类工具，主要用于调用各种安全工具，从而形成便捷的一键式渗透。

attck-pentester-book

渗透测试技术手册 ATTCK-PenTester-Book

aviator

加密免杀工具 Antivirus evasion project

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesome-red-teaming

红队渗透资源List of Awesome Red Teaming Resources

bad-pdf

Steal Net-NTLM Hash using Bad-PDF

bbscan

信息泄漏批量扫描脚本A tiny Batch weB vulnerability Scanner

behinder

“冰蝎”动态二进制加密网站管理客户端

bloodhound

强大的域信息搜集工具，可用图形化展现域账户、主机之间的登录历史与管理关系，信息搜集脚本在Ingestors中，kali可直接使用apt安装 Six Degrees of Domain Admin

bypassantivirus

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

check-localadminhash

Check-LocalAdminHash是一款基于PowerShell开发的工具，它可以尝试通过WMI或SMB来对多台主机进行身份验证，并通过密码哈希来判断用户提供的凭证是否属于本地管理员账户。Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine if the provided credential is a local administrator. It's useful if you obtain a password hash for a user and want to see where they are local admin on a network. It is essentially a Frankenstein of two of my favorite tools along with some of my own code. It utilizes Kevin Robertson's (@kevin_robertson) Invoke-TheHash project for the credential checking portion. Additionally, the script utilizes modules from PowerView by Will Schroeder (@harmj0y) and Matt Graeber (@mattifestation) to enumerate domain computers to find targets for testing admin access against.

chimera

powershell混淆脚本工具 Chimera is a (shiny and very hack-ish) PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

chisel

A fast TCP tunnel over HTTP

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

clashx

Mac上的clash客户端