arrnitage Goto Github PK

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

exploits

gbbypass

冰蝎 哥斯拉 WebShell bypass

godzillasource

哥斯拉源码-v3.03-godzilla

havoc

The Havoc Framework

idiagnosticprofileuac

impacket-examples-windows

The great impacket example scripts compiled for Windows

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jwt-hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

knowledge-base-development-tools

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹2000+，暴力破解协议10余种。

landrayexploit

蓝凌OA漏洞利用工具

malleable-c2-randomizer

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls

micro8

Gitbook

mysql-magic

dump mysql client password from memory

mysqlt

伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者

neurax

A library for constructing self-spreading binaries

nosqlilab

A lab for playing with NoSQL Injection

notes

documents

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

orcus-1.9.1-src

Full Orcus 1.9.1 Source Code

phishingexploit

PhishingExploit

rebeacon_src

red-tldr

red-tldr is a lightweight text search tool, which is used to help red team staff quickly find the commands and key points they want to execute, so it is more suitable for use by red team personnel with certain experience.

run

润学全球官方指定GITHUB，整理润学宗旨、纲领、理论和各类润之实例；解决为什么润，润去哪里，怎么润三大问题； 并成为新**人的核心宗教，核心信念。

saidict

弱口令,敏感目录,敏感文件等渗透测试常用攻击字典

sharpbeacon

CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能

sliver

Adversary Emulation Framework