alilangtest Goto Github PK

hackinglibrary

‪APT,‬ ‪Cyber warfare,‬ ‪Penetration testing,‬ ‪Zero-day,Exploiting,‬ ‪Spyware,Malwares evade anti-virus detection,‬ ‪Rookit CYPTER,‬ ‪Antiviruses Bypassing-av,‬ ‪WORMS,Sandbox-Escape,‬ ‪Memory-injection,‬ ‪Ethical,Gray,White,RedTeam‬...

hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

holicpoc

POC and exploitation of vulnerabilities

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

java-sec-code

Java常见通用漏洞和修复的代码以及利用payload

javasec

自己学习java安全的一些总结，主要是安全审计相关

jenkins-fsb

jira-scan

CVE-2017-9506 - SSRF

kaonashi

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

keychaindump

A proof-of-concept tool for reading OS X keychain passwords

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速对目标进行安全漏洞检测，比攻击者快一步发现风险漏洞。

laravel-poc-cve-2018-15133

PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

lion

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

macbootstrap

A bootstrap script for new Mac

macos-attack-dataset

JSON DataSet for macOS mapped to MITRE ATT&CK Tactics.

maiint

OSINT Organization Employee Profiling Tool for MaiMai

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

nextnet

nextnet is a pivot point discovery tool written in Go.

nndefaccts

nnposter's alternate fingerprint dataset for Nmap script http-default-accounts

offensive_poc

Writing PoC for fun and educate people take security seriously;-)

oneforall

OneForAll是一款功能强大的子域收集工具

oraclecve

Vulnerabilities which found in Oracle products

osprey

perun

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

phantom-evasion

Python AV evasion tool capable to generate FUD executable even with the most common 32 bit metasploit payload(exe/elf/dmg/apk)

printnightmare