whizsail Goto Github PK

burpextender

burpsuite-plugins-usage

Burpsuite-Plugins-Usage

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

bypassav

免杀shellcode加载器

bypassav-1

借助Win-PS2EXE项目编写cna脚本方便快速生成免杀可执行文件

bypassshell

anti AV

bypasswaf

关于安全狗和云锁的自动化绕过脚本

bypasswaf-1

用于mssql手注生成混淆payload

caesar

一个全新的敏感文件发现工具

callbackhell

PoC (DoS) for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

callmewin32kdriver

Load your driver like win32k.sys

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

charlotte

c++ fully undetected shellcode launcher ;)

cheatsheets

Penetration Testing/Security Cheatsheets

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

cloudcomputing-lecture

云计算通俗讲义

cloudfail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

cmd2bx

把jsp的cmdshell升级为冰蝎一句话

cnvd-2020-10487-tomcat-ajp-poc

CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike-bof-toolset

在cobaltstrike中使用的bof工具集，收集整理验证好用的bof。

cobaltstrike_4.3_source

Cobaltstrike4.3源码

cobaltstrikereflectiveloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities.

code-server

VS Code in the browser

code_practice

存放个人练习和打靶机时写的代码

collection-document

Collection of quality safety articles

cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

copy-bypass-webshell

PHPShell webshell bypass D盾

core-nim-programming

Nim 核心编程