xinyuweb Goto Github PK

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I have developed over years for Red Teaming/Pentesting/IT Security audits purposes. Most of them came handy on at least one of my real-world engagements.

php-reverse-shell

pivotnacci

A tool to make socks connections through HTTP agents

poc-t

渗透测试插件化并发框架

portia

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

portscanner

C# Port Scanner

portsscan

A web client port-scanner written in GO, that supports the WASM/WASI interface for Browser WebAssembly runtime execution.

powercat

netshell features all in version 2 powershell

powershell-suite

My musings with PowerShell

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

pretender

Your MitM sidekick for relaying attacks featuring DHCPv6 DNS takeover as well as mDNS, LLMNR and NetBIOS-NS spoofing.

psbits

Simple (relatively) things allowing you to dig a bit deeper than usual.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwncat

Fancy reverse and bind shell handler

pywsus

Standalone implementation of a part of the WSUS spec. Built for offensive security purposes.

qsfuzz

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

redis-rogue-server

Redis(<=5.0.5) RCE

reinschauer

roguewinrm

Windows Local Privilege Escalation from Service Account to System

root

rubeus

Trying to tame the three-headed dog.

s5.go

Socks5 proxy server by golang

s5relay

用于端口转发的多线程内网渗透工具，改进并整合网络著名开源程序HTran、lcx。

safetykatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

sharpadidnsdump

c# implementation of Active Directory Integrated DNS dumping (authenticated user)

sharpc2

.NET C2 Framework Proof of Concept

sharpcall

Simple PoC demonstrating syscall execution in C#

sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

sharpcliphistory

SharpClipHistory is a .NET application written in C# that can be used to read the contents of a user's clipboard history in Windows 10 starting from the 1809 Build.