p1a0z1 Goto Github PK

--java

代码审计知识点整理-Java

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

2022-hw-poc

2022 护网行动 POC 整理

2023hvv

2023 HVV情报速递~

acpi_sandbox_detect

通过ACPI检测沙箱

ad_pentest

红队|域渗透重要漏洞汇总(持续更新)

adduser-bof

Cobalt Strike BOF that Add an admin user

afrog-pocs

afrog-pocs 是 afrog 漏洞检测工具的官方 PoCs（Proof of Concepts）库。

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

am0n-eye

amsi-patches-learned-till-now

I have documented all of the AMSI patches that I learned till now

apt_t00ls

高危漏洞利用工具

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

awesome-fofa

The FOFA Library collects usage tips, common scenarios, F&Q, and more for FOFA.

awesome-pentest-note

Penetration Test ☞ Experience/thought/summary

awesome-poc

一个各类漏洞POC知识库

awesome-redteam

一个红队知识仓库

blind-watermark

Watermark added to the frequency domain by Fourier transform

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

bypass-403

A simple script just made for self use for bypassing 403

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

c2-tool-collection

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

callbackdump

dump lsass进程工具

clonex_0x727

进行克隆用户、添加用户等账户防护安全检测的轻巧工具

codeqlpy

common-tool

Common tool

cs-remote-ops-bof

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files