sbhack Goto Github PK

atattack

敌后侦察

atlas

Quick SQLMap Tamper Suggester

awd-predator-framework

AWD攻防赛webshell批量利用框架

b374k

PHP Webshell with handy features

bettercap

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.

bettercap-proxy-modules

This repository contains some bettercap transparent proxy example modules.

botnet

A tcp botnet written in golang

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

canarytokens

Canarytokens helps track activity and actions on your network.

cobaltstrike4.4_cdf

cobaltstrike4.x版本破解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子认证

cobaltstrike_cat_4.5

猫猫Cs:基于Cobalt Strike[4.5]二开 (原dogcs二开移植)

dingtalk-rce

flash-pop

Flash钓鱼弹窗优化版

fscan

一款内网扫描工具，方便一键大保健~

fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

hershell

Multiplatform reverse shell generator

ip2region

Ip2region is a offline IP location library with accuracy rate of 99.9% and 0.0x millseconds searching performance. DB file is ONLY a few megabytes with all IP address stored. binding for Java,PHP,C,Python,Nodejs,Golang,C#,lua. Binary,B-tree,Memory searching algorithm

lazagne

Credentials recovery project

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

mssql_sql_bypass_wiki

MSSQL注入提权,bypass的一些总结

net-creds

Sniffs sensitive data from interface or pcap

netspy

netspy是一款快速探测内网可达网段工具

nglite

A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS

pentest-tools

Intranet penetration tools

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

poc

poc from bugscan beebeeto

red_team_tool_countermeasures

sbhack

Config files for my GitHub profile.