yates0x00 Goto Github PK

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

allin

A flexible scanner

ant

实时上线的 XSS 盲打平台

apache-log4j-poc

Apache Log4j 远程代码执行

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

awesomescript

AntSword Shell 脚本分享/示例

fake_deposit_address_chrome_extension

study purpose only.

fastjson-1.2.47-rce

Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法

frida-dexdump

A frida tool to dump dex in memory to support security engineers analyzing malware.

full-blockchain-solidity-course-js

Learn Blockchain, Solidity, and Full Stack Web3 Development with Javascript

gobypassav

整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。

gosint

Gosint is a distributed asset information collection and vulnerability scanning platform

lueluelue

an internal tool to present scan results

offensiverust

Rust Weaponization for Red Team Engagements.

php-webshell-bypass-waf

分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV

pyphisher

Easy to use phishing tool with 77 website templates. Author is not responsible for any misuse.

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

shuize_0x727

信息收集自动化工具

simple_phishing

this is a demo for fishing.

sn1per

Attack Surface Management Platform

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sqlmap

Automatic SQL injection and database takeover tool

sqlmap-websocket-proxy

Tool to enable blind sql injection attacks against websockets using sqlmap

struts2scanner

一款Golang编写的Struts2漏洞检测和利用工具，支持并发批量检测

test_jenkins_sonarqube_maven

测试 jenkins + maven

test_jenkins_trigger

测试一下jenkins的sonarcube插件

test_login

virus_scanner

a very small demo for virus scanner

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

webshell

This is a webshell open source project