0xmaohou Goto Github PK

add-ons

学习FF的WebExtensions的时候写的一些插件

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

analysis-tools

恶意软件分析套件

anti-antivirus-note

Anti-AntiVirus-Note

apt_cybercriminal_campagin_collections

APT & CyberCriminal Campaign Collection

aptnotes

Various public documents, whitepapers and articles about APT campaigns

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

bat-armor

Encode powershell payload into bat files

bbscan

A tiny Batch weB vulnerability Scanner

benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

biu-framework

Biu-framework🚀 Security Scan Framework For Enterprise Intranet Based Services(企业内网基础服务安全扫描框架)

blindwatermark

盲水印 by python

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

browspy

浏览器用户全部信息收集js

brutex

Automatically brute force all services running on a target.

bypass_waf

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike_hanization

CobaltStrike 2.5中文汉化版

collection-document

Collection of quality safety articles

cool

Golang-Gin 框架写的免杀平台，内置分离、捆绑等多种BypassAV方式。

csharpscripts

Collection of C# scripts

cve-2018-4878

CVE-2018-4878 样本

dns-persist

DNS-Persist is a post-exploitation agent which uses DNS for command and control.

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

docker-security

docker 安全基线规范

exploits

Windows Exploits

f-scrack

对各类服务进行弱口令检测的脚本

fancybear

Fancy Bear Source Code

fortify

源代码漏洞の审计