ououover Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

1earn

暂停维护 | ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021hvv_vul

2021hvv漏洞汇总

3snake

Tool for extracting information from newly spawned processes

403bypasser

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-pentest-notes

个人域渗透学习笔记

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

awesome-bloodhound

A curated list of awesome BloodhoundAD resources

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-windows-security

List of Awesome Windows Security Resources

badusb-code

收集badusb的一些利用方式及代码

barmie

Java RMI enumeration and attack tool.

bkcrack

Crack legacy zip encryption with Biham and Kocher's known plaintext attack.

blasting_dictionary

爆破字典

bloodhound.py

A Python based ingestor for BloodHound

bluekeep

Proof of concept for CVE-2019-0708

bofroast

Beacon Object Files for roasting Active Directory

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

certify

certify.exe

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

chashell

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.