pythonjwm Goto Github PK

pentest-tools

内网渗透工具

pentest_interview

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~

pentest_tools

收集一些小型实用的工具

pikachu

一个好玩的Web安全-漏洞测试平台

powermad

PowerShell MachineAccountQuota and DNS exploit tools

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

publicmonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

pumpkin-book

《机器学习》（西瓜书）公式推导解析，在线阅读地址：https://datawhalechina.github.io/pumpkin-book

purplesharp

PurpleSharp is a C# adversary simulation tool that executes adversary techniques with the purpose of generating attack telemetry in monitored Windows environments

pwnloris

railgun

random_c2_profile

Cobalt Strike random C2 Profile generator

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

remotepotato0

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin.

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rottenpotato

RottenPotato local privilege escalation from service account to SYSTEM

rubeus-gui

GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

sdp_fs_comparativestudy

Feature Selection on SDP: Model files

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

self-attention-classification

document classification using LSTM + self attention

sentimentanalysis

Sentiment Analysis: Deep Bi-LSTM+attention model

sharp-dumpkey

基于C#实现的获取微信数据库密钥的小工具

sharpcheckinfo

收集目标主机信息，包括最近打开文件，系统环境变量和回收站文件等等

sharpdecryptpwd

对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。源码：https://github.com/RowTeam/SharpDecryptPwd

slowloris

Low bandwidth DoS tool. Slowloris rewrite in Python.

springbootenvdecrypt

SpringBoot获取被星号脱敏的密码的明文

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

sql-injection-payload-list

🎯 SQL Injection Payload List

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具