killerwhiles Goto Github PK

poc-in-github

📡 PoC auto collect from GitHub.

post-exploitation

Post Exploitation Collection

powersharppack

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pyrdp

RDP man-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

quark-engine

Malware (Analysis | Scoring System)

r0capture

安卓应用层抓包通杀脚本

raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redteampowershellscripts

Various PowerShell scripts that may be useful during red team exercise

redwarden

Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation

remote-access-trojan

Windows Remote-Access-Trojan

rshijack

tcp connection hijacker, rust rewrite of shijack

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sectoolset

The security tool(project) Set from github。github安全项目工具集合

security-tools

Collection of small security tools created mostly in Python. CTFs, pentests and so on

securitymanageframwork

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

serpentine

Windows RAT (Remote Administration Tool) with a multiplatform RESTful C2 server

snoop

Snoop — инструмент разведки на основе открытых данных

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

telemetrysourcerer

Enumerate and disable common sources of telemetry used by AV/EDR.

the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).

thunderdns

This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support.

tl-fraud

A collection of fraud related tools for research.

updated-carbanak-source-with-plugins

https://twitter.com/itsreallynick/status/1120410950430089224

vault

swiss army knife for hackers