heroanswer Goto Github PK

0xubypass

AntiAV shellcode loader

1195777-chrome0day

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2019_vul_warning_poc_collect

整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善

2021_hvv

2021 hw

2021hvv_vul

2021hvv漏洞汇总

2022-hw-poc

2022 护网行动 POC 整理

2022hw

2022HW漏洞

active-directory-pentest-notes

个人域渗透学习笔记

allin

A flexible scanner

apt34_leaked-code

This is the leaked code - verifying needed

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

att-ck-cn

ATT&CK实操

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

avlist

avList - 杀软进程对应杀软名称

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / A collection of cobaltstrike resources to make you better!

awesome-cybersecurity-blueteam-cn

网络安全 · 攻防对抗 · 蓝队清单，中文版

awesome-java-security

Java安全☞代码审计/漏洞研究/武器化

awesome-poc

一个各类漏洞POC知识库

awesome-red-teaming

List of Awesome Red Teaming Resources

behinder

Behinder source code

behinderclientsource

冰蝎客户端源码

blackmamba

C2/post-exploitation framework

bof_template

A Beacon Object File (BOF) is a compiled C program, written to a convention that allows it to execute within a Beacon process and use internal Beacon APIs. BOFs are a way to rapidly extend the Beacon agent with new post-exploitation features.

brc4

Brute Ratel C4 泄漏

burpextend

基于Burp插件开发打造渗透测试自动化

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

checkpwd

Check the default pwd of product via checklist.