bakaralisec Goto Github PK

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

aggressiveproxy

Project to enumerate proxy configurations and generate shellcode from CobaltStrike

akto

Instant, Open source API security → API discovery, automated business logic testing and runtime detection.

anonymoussmbserver

一个能快速开启和关闭匿名SMB共享的红队脚本

api-firewall

Fast and light-weight API proxy firewall for request and response validation by OpenAPI specs.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apk2url

A tool to extract IP/URL endpoints from APKs by disassembling and decompiling

attacksurfacemanagement

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

autohacktools

一站式自动下载部署常用安全工具小脚本.

autoredtools

AutoRedTools是一款轻量级一站式自动下载/自动更新常用开源软件的工具，主要帮助安全从业者/安全开发人员快速进行环境搭建以及常用软件的更新，节约软件的更新或者安 装的时间，从而提升生产效率或工作效率。

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-nginx-security

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

bakaralisec

Config files for my GitHub profile.

bimg-shellcode-loader

breaching-defenses.com

Red Team Home Lab for breaching-defenses.com with an ELK stack

bumblecrypt

A Bumblebee-inspired Crypter

burp-suite-certified-practitioner-exam-study

Burp Suite Certified Practitioner Exam Study

burpsuitecertifiedpractitioner

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

byob

An open-source post-exploitation framework for students, researchers and developers.

caldera

Automated Adversary Emulation Platform

cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

chrome-bandit

Programmatically extract saved passwords from Chromium based browsers.

cobaltstrike-headless

Aggressorscript that turns the headless aggressor client into a (mostly) functional cobalt strike client.

conf-thief

A Red Team tool for exfiltrating sensitive data from Confluence pages.

cstorm-windows-startup-virus-in-c

An opensource Prank Startup Malware for windows developed using C Programming Language.

cve

Gather and update all available and newest CVEs with their PoC.

cve-2021-1675-lpe-exp

PrintNightmare , Local Privilege Escalation of CVE-2021-1675 or CVE-2021-34527

defendercheck

Identifies the bytes that Microsoft Defender flags on.

devops-roadmap

DevOps Roadmap for 2023. with learning resources

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点