yaoyao-cool Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

aheadlib

Fake DLL Source Code Generator

aksk_tool

AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

amass

In-depth attack surface mapping and asset discovery

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

arl_files

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-cobaltstrike

List of Awesome CobaltStrike Resources

awesome-redteam

一个攻防知识仓库 Red Teaming and Offensive Security

bad-pdf

Steal Net-NTLM Hash using Bad-PDF

binary-security-advanced-references

二进制安全高级参考资料

blog

痛定思痛

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials and fuzzing.

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2020-15261

CVE-2020-15261 test

cve-2022-0847

CVE-2022-0847 POC and Docker and Analysis write up

cve-2024-38077

RDL的堆溢出导致的RCE

cve-2024-6387-poc

a signal handler race condition in OpenSSH's server (sshd)

ddns-go

简单好用的DDNS。自动更新域名解析到公网IP(支持阿里云、腾讯云、Dnspod、Cloudflare、Callback、华为云、百度云、Porkbun、GoDaddy、Google Domain)

dex2jar

Tools to work with android .dex and java .class files

dnslog-go

DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具，自带WEB界面

docker-php

PHP Docker 镜像，默认装好常用扩展

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等