wkit1cg Goto Github PK

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

rengine

Back

s4utomato

Escalate Service Account To LocalSystem via Kerberos

scopesentry

ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

scopesentry-scan

ScopeSentry工具扫描端源码

scopesentry-ui

ScopeSentry工具的前端UI

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

sharpdetectionntlmssp

利用 NTLMSSP 探测 Windows 信息

sharpmemshell

Memshell

sharpwsus

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

sylas

数据库综合利用工具

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

titanldr

Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH

vba2clr

Running .NET from VBA

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

viper

Redteam operation platform with webui 图形化红队行动辅助平台

vulnerability-paper

收集的文章 https://mrwq.github.io/vulnerability-paper/

win32_offensive_cheatsheet

Win32 and Kernel abusing techniques for pentesters

wspcoerce

PoC to coerce authentication from Windows hosts using MS-WSP

zenldr

Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature