no-github Goto Github PK

activemqrce

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用 内存马注入

adinfo

域信息收集工具

anew

A tool for adding new lines to files, skipping duplicates

apkanalyser

一键提取安卓应用中可能存在的敏感信息。

apktool

A tool for reverse engineering Android apk files

archive

用于备份一些软件安装包

archive2

awesome-poc

一个各类漏洞POC知识库

backtrace

三网回程路由测试

bash-insulter

Insults the user when typing wrong command

berylenigma

FFFFFFFF0X team toolset for penetration testing, cryptography research, CTF and daily use. | FFFFFFFF0X团队工具集，用来进行渗透测试，密码学研究，CTF和日常使用。

blackjump

JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021

boopkit

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

bpftool

Automated upstream mirror for bpftool stand-alone build.

bypasspro

对权限绕过自动化bypass的burpsuite插件

callbackdump

dump lsass进程工具

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

certipy

Tool for Active Directory Certificate Services enumeration and abuse

cf-worker-dir

A web directories base on Cloudflare worker.

cheeseounce

Coerce Windows machines auth via MS-EVEN

chrome_get_cookie

利用chrome扩展 dump 浏览器cookie https://saucer-man.com/information_security/787.html

chying

承影 - 一款安全工具箱,集成了目录扫描、JWT、Swagger 测试、编/解码、轻量级 BurpSuite、杀软辅助功能

clashx.meta

cobaltspam

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

copy-cert

基于已知网站 ssl 证书的信息生成新的自签名证书，除了证书是不被信任的以外，其他的信息看上去基本一致，用于伪装流量。

crack

弱口令爆破工具。Weak Password Blaster Tool.

crackmapexec

A swiss army knife for pentesting networks

crawlergo

A powerful browser crawler for web vulnerability scanners

crossc2

generate CobaltStrike's cross-platform payload