a08030605 Goto Github PK

-oscp-pentest-methodologies

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

3proxy

3proxy - tiny free proxy server

aniya

免杀框架

ast-hook-for-js-re

浏览器内存漫游解决方案（探索中...）

av_evasion_tool

掩日 - 免杀执行器生成工具

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

behinderclientsource

冰蝎客户端源码-3.0-BETA11.t00ls

captcha-killer

burp验证码识别接口调用插件

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2021-44228

This Log4j RCE exploit originated from https://github.com/tangxiaofeng7/CVE-2021-44228-Apache-Log4j-Rce

domain-penetration_one-stop

域渗透一条龙

feng

fscan

一款内网扫描工具，方便一键大保健~

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

hackjava

《深入理解Java代码审计》

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

log4j2scan

log4j2 burp扫描插件 | 兼容各种格式的请求 | 漏报少 | 标识性Payload | 绕waf

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

nglite

A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS

npdeks

offensiveautoit

Offensive tooling notes and experiments in AutoIt v3 (https://www.autoitscript.com/site/autoit/)

payloads

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pocassist

全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：

pocassistdb

database of pocassist（漏洞库）

qiniuclient

云存储管理客户端。支持七牛云、腾讯云、青云、阿里云、又拍云、亚马逊S3、京东云，仿文件夹管理、图片预览、拖拽上传、文件夹上传、同步、批量导出URL等功能

scan4all

Vulnerabilities Scan；15000+PoC漏洞扫描；18种应用密码爆破；7000+Web指纹；146种协议90000+规则Port扫描；Fuzz、HW打点、BugBounty神器...

shellcodeframework

绕3环的shellcode免杀框架