ransomware-sample Public

JNDIExploit Public

A malicious LDAP server for JNDI injection attacks

ARL Public

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。

red_team_tool_countermeasures Public

Cardinal Public

CTF🚩 AWD (Attack with Defense) 线下赛平台 / AWD platform - 欢迎 Star~ ✨

Middleware-Vulnerability-detection Public

CVE、CMS、中间件漏洞检测利用合集 Since 2019年9月15日

RedTeamer Public

红方人员作战执行手册

Neo-reGeorg Public

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

Micro8 Public

nps Public

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发,支持内网http代理、内网socks5代理,同时支持snappy压缩(节省带宽和流量)、站点保护、加密传输、多路复用、header修改等。支持web图形化管理。

Bypass_Disable_functions_Shell Public

一个各种方式突破Disable_functions达到命令执行的shell

Github-Monitor Public

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

CaptfEncoder Public

CaptfEncoder 跨平台网络安全工具套件

qqgroup-visualization Public

QQ群关系可视化查询3D力导向图,数据库已经更新

pentest_tools Public

收集一些小型实用的工具

greyhame-2017 Public

知识星球"灰袍技能" 2017 精华

GSIL Public

GitHub Sensitive Information Leakage(GitHub敏感信息泄露)

AutoSploit Public

Automated Mass Exploiter

AngelSword Public

Python3编写的CMS漏洞检测框架

php_bugs Public

PHP代码审计分段讲解

deemon Public

Deemon is a tool to detect CSRF in web applications. Deemon has been used for the paper "Deemon: Detecting CSRF with Dynamic Analysis and Property Graphs" by G. Pellegrino, M. Johns, S. Koch, M. Ba...

hxsec_search Public

sqli-proxy Public

Awesome-Hacking Public

A collection of various awesome lists for hackers, pentesters and security researchers

shadowsocksr-pyqt Public

POC-T_test Public

SQLiScanner Public

Automatic SQL injection with Charles and sqlmap api

reGeorg Public

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

ftp_anonymous_scan Public

zip_crack Public