security2864 Goto Github PK

automator

⌨ Digispark™ Rubber Ducky code editor for Windows.

awbruter

千倍速一句话木马密码爆破工具

bufferfly

攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。

chrome-0day

codeparkshare

Python初学者（零基础学习Python、Python入门）书籍、视频、资料、社区推荐

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

digistumparduino

Files to add Digistump support (Digispark, Pro, DigiX) to Arduino 1.6.X (1.6.5+)

exploitdb

The official Exploit Database repository

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

iscsi_add_remove

none

none

parameth

This tool can be used to brute discover GET and POST parameters

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

内网渗透的一些工具

poc-t

渗透测试插件化并发框架

pppoe-hijack

伪装PPPoE服务器截取密码

pppoe-intercept

用来模拟中间人拦截 pppoe 拨号过程的账号密码

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

usb-rubber-ducky

weak-password

字典大全 dictionary