1h32xb5 Goto Github PK

fofaspider

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gobypass

invoke-thehash

PowerShell Pass The Hash Utils

jndi_tool

JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

killdefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

log4j2burpscanner

CVE-2021-44228，log4j2 burp插件 Java版本，dnslog选取了非dnslog.cn域名，可自定义ceye.io

mdut

MDUT - Multiple Database Utilization Tools

netspy

netspy是一款快速探测内网可达网段工具

networkexplibrary

Network vulnerability exploitation library

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

nsngfw-rce-poc_exp

NSNGFW网康下一代防火墙RCE 漏洞批量检测&利用&批量getshell

nysecctf

NYSECCTF of 2021

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest-tools

Intranet penetration tools

poc-bomber

利用大量高威胁漏洞poc快速获取目标权限

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

ppldump

Dump the memory of a PPL with a userland exploit

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

qingteng-wblab

happy hunting~~

rdpscan

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

redis-rce

Redis 4.x/5.x RCE

ruoyi-all

若依后台定时任务一键利用

scan-ip-

Scan segment C IP base of icmp

scanport

1

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

sharpdecryptpwd

对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。源码：https://github.com/RowTeam/SharpDecryptPwd

sharpdpapi

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

sharplocker