yeshuibo Goto Github PK

redis-rce

Redis RCE 的几种方法

redisdesktopmanager-windows

RedisDesktopManager Windows版本

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

redteamnotes

红队笔记

redteamtools

记录自己写的部分工具

reduh

Create a TCP circuit through validly formed HTTP requests

reflectivedll_sektor7

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

reko

Reko is a binary decompiler.

remcom

Remote Command Executor: A OSS replacement for PsExec and RunAs - or Telnet without having to install a server. Take your pick :)

responder-windows

Responder Windows Version Beta

reverse-engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

reverse-engineering-for-beginners

translate project of Drops

rhinopoc

Mozilla Rhino deserialization vulnerable POC

rootkit.com

Mirror of users section of rootkit.com

routerhunter-2.0

Testing vulnerabilities in devices and routers connected to the Internet.

rpcview

RpcView is a free tool to explore and decompile Microsoft RPC interfaces

runascs

RunasCs - Csharp and open version of windows builtin runas.exe

runpe

Code that allows running another windows PE in the same address space as the host process.

ryujinx

Experimental Nintendo Switch Emulator written in C#

s

The simple, fast, powerful SYN/TCP port scanner source code

scalpel

scalpel是一款命令行扫描器，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog

sdictionary

sDictionary

search_viewer

集fofa、鹰图、shodan为一体的gui图形界面化工具

sec-chart

安全思维导图集合

secguide

面向开发人员梳理的代码安全指南

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

securedorg.github.io

securityinterviewguide

网络信息安全从业者面试指南（持续补充各公司招聘面试题目和侧重点）