shuxiaa Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

actuatorexploit

SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE

ai-for-security-learning

安全场景、基于AI的安全算法和安全数据分析学习资料整理

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

angelsword

Python3编写的CMS漏洞检测框架

anti-honeypot

一款可以检测WEB蜜罐并阻断请求的Chrome插件

aptnotes

Various public documents, whitepapers and articles about APT campaigns

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

badpotato

Windows 权限提升 BadPotato

bbscope

Scope gathering tool for HackerOne, Bugcrowd, and Intigriti!

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpcollector

通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypassantivirus

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

captfencoder

CaptfEncoder是一款跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具，并聚合各类在线工具。

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

cve-2018-8639-exp

dumpdex

💯一款Android脱壳工具，需要xposed支持, 易开发已集成该项目：

email_my_pc

远程监控电脑，也许一切只需要一封邮件。

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

fake_sqli_bypass

Fake框架的自动化Fuzz WAF/IDS 功能

firing-range

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

gui_tools

一个由各种图形化渗透工具组成的工具集

hackingresource

“玄魂工作室--安全圈” 知识星球内资源汇总

hfish

Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段

iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

jdsrc-small-classroom

京东SRC小课堂系列文章

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)