xy-sec Goto Github PK

angelsword

Python3编写的CMS漏洞检测框架

awesome-hacking

awesome hacking chinese version

bashbunny-payloads

The Official Bash Bunny Payload Repository

beef

The Browser Exploitation Framework Project

blog_demos

CSDN博客专家程序员欣宸的github，这里有六百多篇原创文章的详细分类和汇总，以及对应的源码，内容涉及Java、Docker、Kubernetes、DevOPS等方面

bloodhound

Six Degrees of Domain Admin

brootkit

Lightweight rootkit implemented by bash shell scripts v0.10

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

cewl

CeWL is a Custom Word List Generator

chocolatestore

Cache chocolatey packages to efficiently provision multiple machines or VMs on a LAN

cms-hunter

CMS漏洞测试用例集合

cobalt_strike_wiki

Cobalt Strike系列

commons-dbutils

Mirror of Apache Commons DbUtils

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cvelist

Pilot program for CVE submission through GitHub

datax

DataX是阿里云DataWorks数据集成的开源版本。

demiguise

HTA encryption tool for RedTeams

det

(extensible) Data Exfiltration Toolkit (DET)

dirtycow.github.io

Dirty COW

dnsteal

DNS Exfiltration tool for stealthily sending files over DNS requests.

dolphinscheduler

Apache DolphinScheduler is a distributed and extensible workflow scheduler platform with powerful DAG visual interfaces, dedicated to solving complex job dependencies in the data pipeline and providing various types of jobs available out of box.

easy-sms

:calling: 一款满足你的多种发送需求的短信发送组件

embedinhtml

Embed and hide any file in an HTML file

empire

Empire is a PowerShell and Python post-exploitation agent.

ettercap

Ettercap Project

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

faceswap

Deepfakes Software For All

fakeimageexploiter

Use a Fake image.jpg to exploit targets (hide known file extensions)

fluxion

Fluxion is a remake of linset by vk496 with less bugs and enhanced functionality.

generatejenkinsexploit