velgar Goto Github PK

2021_hvv

2021 hw

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

as-exploits

**蚁剑后渗透框架

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-redteam

一个红队知识仓库

awesome-web-security

🐶 A curated list of Web Security materials and resources.

binary-learning

二进制安全相关的学习笔记，感谢滴水逆向的所有老师辛苦教学。

bloodhound

Six Degrees of Domain Admin

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

conote-community

Conote 综合安全测试平台社区版。

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

flogo

Project Flogo is an open source ecosystem of opinionated event-driven capabilities to simplify building efficient & modern serverless functions, microservices & edge apps.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gatherinfo

信息收集 OR 信息搜集

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

goad

game of active directory

hello-java-sec

☕️ Java Security，安全编码和代码审计

installerfiletakeover

intranet-movement-kit

内网横向移动工具箱

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹2000+，暴力破解协议10余种。

learnjavamemshellfromzero

【三万字原创】完全零基础从0到1掌握Java内存马，公众号：追梦信安

micro8-html

Micro8 Online

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nimshellcodeloader

使用nim编写的shellcode加载器