xiaofghd893 Goto Github PK

burpsuiteextender

简单扫描sql注入漏洞

caudit

集权设施扫描器

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

cve-2021-3493

Ubuntu OverlayFS Local Privesc

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

embedded-sqlite-demo

Costura.Fody is an add-in for Fody and it is by far the best and easiest way to embed external assemblies in your executable.

getsystem

webshell下提权执行命令 Reference:https://github.com/yusufqk/SystemToken

java-gate

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

jndiexploit1

fork

ntlmrelayx.py_to_exe

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

redteamnotes

红队笔记

ultimaste-nuclei-templates

极致攻防实验室 nuclei 检测 POC

webshell

这是一些常用的webshell

yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）