ze4lfrog Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aes

AES algorithm implementation in C

ai-security-learning

自身学习的安全数据科学和ai安全算法的学习资料

alb

攻击日志分析工具

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

alphago

A replication of DeepMind's 2016 Nature publication, "Mastering the game of Go with deep neural networks and tree search," details of which can be found on their website.

android_unshell

angelsword

Python3编写的CMS漏洞检测框架

anti-honeypot

一款可以检测WEB蜜罐并阻断请求的Chrome插件

api-s-for-osint

List of API's for gathering information about phone numbers, addresses, domains etc

apt2

automated penetration toolkit

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

assetscan

资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-ml-for-cybersecurity

:octocat: Machine Learning for Cyber Security

baidu_sqlmapapi

use baidu search url to test sqlinjection, you can use it to get lots of vulnerable urls

benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

betterdefaultpasslist

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

blockchainsecuritytutorial

NoneAge Blockchain Security Tutorial

break

业务风险枚举与规避知识框架（Business Risk Enumeration & Avoidance Kownledge）

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

captcha-generator

用于深度学习领域图片识别项目的验证码样本数据生成器

captcha_recognize

Image Recognition captcha without image segmentation 无需图片分割的验证码识别

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

cms-exploit-framework

CMS Exploit Framework

cms-hunter

CMS漏洞测试用例集合