r35tart Goto Github PK

penetration_testing_case

用于记录分享一些有趣的案例

pentest-tools

内网渗透的一些工具

phpsploit

Stealth post-exploitation framework

poc-exploit

PoC or Exp Of Vulnerability

poc_cve-2018-1002105

PoC for CVE-2018-1002105.

pocsuite

This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

r35tart

recaptcha

reCAPTCHA = REcognize CAPTCHA: A Burp Suite Extender that recognize CAPTCHA and use for intruder payload

redis-rogue-server

Redis(<=5.0.5) RCE

redisdirscan

此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测

rediswritefile

通过 Redis 主从写出无损文件

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shadowbroker

The Shadow Brokers "Lost In Translation" leak

shellcode_launcher

Shellcode launcher utility

sourceleakhacker

一个多线程WEB源码泄漏检测工具

sqlinjectionwiki

一个专注于聚合和记录各种SQL注入方法的wiki

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

subdomain-blasting

sublist3r

Fast subdomains enumeration tool for penetration testers

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

web-security

Web安全中比较好的文章

webshell

This is a webshell open source project

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

wooyun_public

乌云公开漏洞、知识库爬虫和搜索 crawl and search for wooyun.org public bug(vulnerability) and drops

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。