startagain2016 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

0day-1

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

0xagent

CobaltStrike 4.0 - 4.5 Patch

100-redteam-projects

Projects for security students

1135-cobaltstrike-toolkit

about CobaltStrike

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2021hvv_vul

2021hvv漏洞汇总

2022-lpe-uaf

CVE-2022-2588,CVE-2022-2586,CVE-2022-2585

365cs

CobaltStrike优秀资源

3klcon

Automation Recon tool which works with Large & Medium scopes. It performs more than 20 tasks and gets back all the results in separated files.

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

aad-sso-enum-brute-spray

POC of SecureWorks' recent Azure Active Directory password brute-forcing vuln

aapfinder

AAP Finder (Advanced Admin Page Finder) is a tool written in Python3 with advanced functionalities

aazhen-rexha

自研JavaFX图形化漏洞扫描工具，支持扫描的漏洞分别是： ThinkPHP-2.x-RCE， ThinkPHP-5.0.23-RCE， ThinkPHP5.0.x-5.0.23通杀RCE， ThinkPHP5-SQL注入&敏感信息泄露， ThinkPHP 3.x 日志泄露NO.1， ThinkPHP 3.x 日志泄露NO.2， ThinkPHP 5.x 数据库信息泄露的漏洞检测，以及批量检测的功能。漏洞POC基本适用ThinkPHP全版本漏洞。

abaddon

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

aclpwn.py

Active Directory ACL exploitation with BloodHound

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

active-directory-exploitation-cheat-sheet-1

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activedirectoryenumeration

Enumerate AD through LDAP with a collection of helpfull scripts being bundled

activereign

A Network Enumeration and Attack Toolset

ad-pentesting-notes

adamantium-thief

:key: Decrypt chromium based browsers passwords, cookies, credit cards, history, bookmarks, autofill. Version > 80 is supported.

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adexplorersnapshot.py

ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.

adinfo

域信息收集工具

adlab

Custom PowerShell module to setup an Active Directory lab environment to practice penetration testing.