ggg4566 Goto Github PK

php-audit-labs

一个关于PHP的代码审计项目

pocstart

轻量级漏洞验证和利用框架

pointsearch

备份文件快速扫描工具

portgo

fofa gui query tool

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

redteam-tips

关于红队方面的学习资料

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

redteamhelp

Tools I use on red team engagements and more

redteamnotes

红队笔记

reflectivedllrefresher

Universal Unhooking

remoteshellcodeexec

Execute shellcode from a remote-hosted bin file using Winhttp.

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

secguide

面向开发人员梳理的代码安全指南

sharpallowedtoact-modify

resource-based constrained delegation RBCD

sharpbeacon

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

sharpgetuserloginiprpc

提取域控日志，支持远程提取

sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

sharpuserip

在域控或远程提取登录日志，快速获取域用户对应的IP地址

shellcode-loader

Open repository for learning dynamic shellcode loading (sample in many programming languages)

shellextcontextmenuhandler

sometools

自己使用的一些脚本和工具

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

sqlexp

SQL 注入利用工具，存在waf的情况下自定义编写tamper脚本 dump数据

trojan-go

Go实现的Trojan代理，支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件，多平台，无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/

v2ray-agent

（VLESS+TCP+TLS/VLESS+TCP+XTLS/VLESS+gRPC+TLS/VLESS+WS+TLS/VMess+TCP+TLS/VMess+WS+TLS/Trojan+TCP+TLS/Trojan+gRPC+TLS/Trojan+TCP+XTLS）+伪装站点、八合一共存脚本，支持多内核安装

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

webscreen

网站快照工具

webshell-venom

免杀webshell无限生成工具

windows-classic-samples

This repo contains samples that demonstrate the API used in Windows classic desktop applications.