sunpeak Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

404starlink2.0-galaxy

404StarLink Project 2.0 - 推荐真正优质、有意义、有趣、坚持维护的开源项目

abptts

TCP tunneling over HTTP/HTTPS for web application servers

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ajpy

antsword

AntSword is a cross-platform website management toolkit.

antsword-1

**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

apache-solr-rce

Apache Solr Exploits 🌟

apkanalyser

一键提取安卓应用中可能存在的敏感信息。

aptnotes

Various public documents, whitepapers and articles about APT campaigns

arachni

Web Application Security Scanner Framework

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

authmatrix

AuthMatrix is a Burp Suite extension that provides a simple way to test authorization in web applications and web services.

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / A collection of cobaltstrike resources to make you better!

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-hacking-resources

A collection of hacking / penetration testing resources to make you better!

awesome-malware-analysis

Defund the Police.

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-redteam

一个红队知识仓库

awvs12_docker

AWVS12 最新版本12.0.190902105_x64

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bcelcodeman

BCEL encode/decode manager for fastjson payloads

behinder

“冰蝎”动态二进制加密网站管理客户端

beroot

Privilege Escalation Project - Windows / Linux / Mac

binary-files

EarthWorm/Termite 停止更新

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository