nyx2022 Goto Github PK

poc2jar

Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率

port_tunnel

这个工具只是临时名称，我称他为端口隧道技术，解决隔离内网上线问题。

portbrute

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD

portsscan

A web client port-scanner written in GO, that supports the WASM/WASI interface for Browser WebAssembly runtime execution.

post-hub

内网横向

postconfluence

哥斯拉Confluence后渗透插件 MakeToken SearchPage ListAllUser AddAdminUser ListAllPage ........

powerhuntshares

PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains.

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

powershell-obfuscation

powershell免杀混淆器，简单有效，VT全过。A simple and effective powershell obfuscaiton tool bypass Anti-Virus

pq

Pure Go Postgres driver for database/sql

printnightmare-lpe

CVE-2021-1675 (PrintNightmare)

printnotifypotato

PrintNotifyPotato

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

processinjectionpocs

Proof-of-Concept code snippets for a variety of different process injection techniques

protoplex

(端口复用+协议分流)A protocol multiplexer in Go

proxynotshell-poc

pty

（linux持续终端的实现）PTY interface for Go

purplesharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

pystinger

python开发，一款使用webshell进行流量转发的出网工具

pywhisker

Python version of the C# tool for "Shadow Credentials" attacks

qqwry.dat

自动更新的纯真ip库，每天自动更新

rastafury

(beautiful)a tool for create ShellCodes from PE, based on go-donut(Binject); updated, improved and with new functionalities.

read_path

js / html /josn 中获取 泄露的接口 / URL / 未授权路径 获取之后尝试访问

realor-sql-injection-check

瑞友天翼应用虚拟化系统远程代码执行漏洞检测工具

realor-sql-injection-exp

瑞友天翼应用虚拟化-远程代码执行/sql注入,realor-sql-Injection

redguard

RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.

redteaming2020

RedTeaming知识星球2020年安全知识汇总

registrybypassuac

windows api修改注册表BypassUac，纯练手

req

Simple Go HTTP client with Black Magic

requesttemplate

双语双端内网扫描以及验证工具