hdys0vn Goto Github PK

blackjump

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

blasting

bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

bounceback

↕️🤫 Stealth redirector for your red team operation security

bountyhunterinchina

重生之我是赏金猎人系列，分享自己和团队在SRC、项目实战漏洞测试过程中的有趣案例

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

bundler-bypass

免杀捆绑器，过主流杀软。A Bundler bypass anti-virus

bypassgodzilla

哥斯拉WebShell免杀生成 / Code By:Tas9er

caa

CaA - BurpSuite Collector and Analyzer

camille

基于Frida的Android App隐私合规检测辅助工具

cemail

检测邮件发送的可行性，可用来红队作战中对目标邮箱账户测试。The feasibility sent by the detection mail can be used for the target mailbox account test in the Red Team battle.

certify

Active Directory certificate abuse.

certsync

Dump NTDS with golden certificates and UnPAC the hash

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chatviewtool

基于Java实现的图形化微信聊天记录解密查看器

cloudtools

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务器工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务器工具主要是针对ecs服务器的管理，查看、执行命令等等

cobalt-strike-stager-parser

cobaltstrike-detection

This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared

coercedpotatordll

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

coffee

A COFF loader made in Rust

confluencememshell

Confluence CVE 2021，2022，2023 利用工具，支持命令执行，哥斯拉，冰蝎 内存马注入

crackmapexec

A swiss army knife for pentesting networks

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

credphish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

crossc2

generate CobaltStrike's cross-platform payload

crowsec

视频课件和工具分享

cs-aggressor-scripts

Aggressor Scripts for Cobalt Strike

ctf_challenges

适用于一线安服的ctf培训题目，全docker环境一键启动

cve-2022-26134-godzilla-memshell