haiandaxia Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

1savedrawio

365-stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

90daysofcybersecurity

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

above

Invisible network protocol sniffer

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad_enumeration_hunt

adaclscanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

adcsync

Use ESC1 to perform a makeshift DCSync and dump hashes

admin-scanner

This tool is design to find admin panel of any website by using custom wordlist or default wordlist easily and allow you to find admin panel trough a proxy server

administrative-divisions-of-china

中华人民共和国行政区划：省级（省份）、 地级（城市）、 县级（区县）、 乡级（乡镇街道）、 村级（村委会居委会） ，**省市区镇村二级三级四级五级联动地址数据。

admodule

Microsoft signed ActiveDirectory PowerShell module

adokit

Azure DevOps Services Attack Toolkit

afl

american fuzzy lop - a security-oriented fuzzer

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

agentic_security

Agentic LLM Vulnerability Scanner

ai-vtuber-kun

AI Vtuber Kun是一个由OpenAI驱动的虚拟主播，可以在Bilibili直播中与观众实时互动。它使用自然语言处理和文本转语音技术生成对观众问题的回答。

aicef

aidapal

aker

SSH bastion/jump host/jumpserver

amperagekit

One stop shop for enabling Recall in Windows 11 version 24H2 on unsupported devices

any2api

A framework( or a tool? ) that turns any website into an API

api-vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

ashro_auto_attribution

调用微步api实现自动化溯源，---骗人的 目前只实现了 筛选高价值可溯源目标，肉鸡抓取功能

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.