popmedd Goto Github PK

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

penetration-testing-study-notes

Penetration Testing notes, resources and scripts

penetration-zbook

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest

渗透测试用到的东东

pentest-1

内网渗透中的一些工具及项目资料

pentest-tools

内网渗透工具

pentest_dic

自己收集整理自用的字典

pentest_note

渗透测试常规操作记录

pentest_tools

收集一些小型实用的工具

pentestdb

WEB渗透测试数据库

pentester_fully-automatic-scanner

定向全自动化渗透测试

permeate

一个用于参透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学

perun

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

pest

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

php-audit-labs

一个关于PHP的代码审计项目

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

pingtunnel

ICMP流量伪装转发工具 ping tunnel is a tool that advertises tcp/udp/socks5 traffic as icmp traffic for forwarding.

poc-t

渗透测试插件化并发框架

pocassist

pocassist是一款全新的开源漏洞测试框架，无需代码知识也可实现对poc的在线编辑、管理、测试。 使用之前请先阅读文档。

pocbox

PoCBox - 漏洞测试验证辅助平台

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

portbrute

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD

practical-malware-analysis

Exercise writeups from the book Practical Malware Analysis.

practicalmalwareanalysis-labs

Binaries for the book Practical Malware Analysis

proxy_pool

Python爬虫代理IP池(proxy pool)

pspy

Monitor linux processes without root permissions

publicmonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

publicsecscan

针对大量WEB资产进行分布式WEB安全扫描，发现web环境下常规的一些安全漏洞