tomtom18-eng Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

24hbookcom

alicloud-tools

阿里云ECS、策略组辅助小工具

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

behinder

Behinder source code

bt_panel_privilege_escalation

宝塔面板Windows版提权方法

caesar

一个全新的敏感文件发现工具

cve-2021-1675

Impacket implementation of CVE-2021-1675

gogo

面向红队的, 高度可控可拓展的自动化引擎

gogo-templates

gogo-templates

gosint

Gosint is a distributed asset information collection and vulnerability scanning platform

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

helloexp-0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

invoke-thehash

PowerShell Pass The Hash Utils

javaweb-sec

攻击Java Web应用-[Java Web安全]

jce

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

magic_c2

红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.

myscan

myscan 被动扫描

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

oracleshell

oracle 数据库命令执行

penetration_testing_case

用于记录分享一些有趣的案例

pentest-book

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

phpshell

php大马|php一句话|webshell|免杀过狗|渗透|黑客

pillager

Pillager是一个适用于后渗透期间的信息收集工具

printnightmare

sec_interview_know_list

信息安全方面面试清单

shiftleft-java-demo