scriptkiddlepyh Goto Github PK

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

antsword-loader

AntSword 加载器

blackmamba

C2/post-exploitation framework

burpshiropassivescan

一款基于BurpSuite的被动式shiro检测插件

bypasswaf

用于mssql手注生成混淆payload

charlotte

c++ fully undetected shellcode launcher ;)

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

cs-notes

:books: 技术面试必备基础知识、Leetcode、计算机操作系统、计算机网络、系统设计

cve-2020-14321

Course enrolments allowed privilege escalation from teacher role into manager role to RCE

dirtycow

Dirty Cow exploit - CVE-2016-5195

ew

内网穿透(跨平台)

flask-session-cookie-manager

:cookie: Flask Session Cookie Decoder/Encoder

flask_session_decode

follina.py

POC to replicate the full 'Follina' Office RCE vulnerability for testing purposes

foureye

AV Evasion Tool For Red Team Ops

fuzzbunch

NSA finest tool

gitrecon

OSINT tool to get information from a Github and Gitlab profile and find user's email addresses leaked on commits.

hadoop-attack-library

A collection of pentest tools and resources targeting Hadoop environments

icmpsh

Simple reverse ICMP shell

immunitydebugger

ImmunityDebugger

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

inscan

边界打点后的自动化渗透工具

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

micro8

Gitbook

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

ms17-010_cve-2017-0143

natbypass

一款lcx在golang下的实现

oscp-preparation-material

All in One OSCP Preparation Material

pentest-tools

Intranet penetration tools

permx-hackthebox-poc