sec-fork Goto Github PK

blackhat-usa-2022-demos

Demos for the Blackhat USA 2022 talk "Taking Kerberos to the Next Level"

blen

漏洞批量验证框架

blind-ssrf

Nuclei Templates to reproduce Cracking the lens's Research

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

blockchain-dark-forest-selfguard-handbook

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

blog_demos

CSDN博客专家程序员欣宸的github，这里有六百多篇原创文章的详细分类和汇总，以及对应的源码，内容涉及Java、Docker、Kubernetes、DevOPS等方面

bloodhound

Six Degrees of Domain Admin

bloodyad

BloodyAD is an Active Directory Privilege Escalation Framework

blueming

备份文件扫描，并自动进行下载

bof2shellcode

POC tool to convert CobaltStrike BOF files to raw shellcode

bofroast

Beacon Object Files for roasting Active Directory

bofs

Collection of beacon object files for use with Cobalt Strike to facilitate 🐚.

bofss

Collection of Beacon Object Files

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

boopkit

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

bountytricks

bpf-hookdetect

Dectect syscall hooking using eBPF

bridge

无回显漏洞测试辅助平台，平台使用Java编写，提供DNSLOG，HTTPLOG等功能，辅助渗透测试过程中无回显漏洞及SSRF等漏洞的验证和利用。

brute-ratel-external-c2-specification

This repository provides the core to build your own External C2 Server and Connector for Brute Ratel C4

bufferfly

攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。

burpdomain

新一代子域名收集工具 - Subdomain automatic/passive collection tool

burpextend

基于Burp插件开发打造渗透测试自动化

burpfakeip

服务端配置错误情况下用于伪造ip地址进行测试的Burp Suite插件

burpshiropassivescan

一款基于BurpSuite的被动式shiro检测插件

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials and fuzzing.

bypassavnote

免杀死亡笔记

bypassbehinder

ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er

bypassbehinder4j

冰蝎Java WebShell自动化免杀生成