b0q1 Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

awesome-advanced-windows-exploitation-references

List of Awesome Advanced Windows Exploitation References

b0q1

Learning!

b0q1.github.io

Learning!

baseproxy

Asynchronous HTTP/HTTPS proxy that intercepts and modifies messages(异步http/https代理,可拦截修改报文)

codeql_compile

自动反编译闭源应用，创建codeql数据库

cryptapi

Ransomware Using CryptoAPI

ctf_xinetd

A docker repository for deploying pwnable challenges in CTF

cve-2018-8639-exp

dingdingluckymoney

自动抢钉钉红包

dirt

Driver Initial Reconnaissance Tool

diverttcpconn

A TCP packet diverter for Windows platform

domatophp

CFG and scripts for fuzzing the PHP interpreter with Domato

eyes.sh

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fastjson

Fastjson姿势技巧集合

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

frizzer

Frida-based general purpose fuzzer

gadgetinspector

利用链、漏洞检测工具

get_domain

go-mimikatz

A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

go-smb2

SMB2/3 client library written in Go.

gomasscan

gomasscan是一个纯go编写的masscan扫描库

gososerial

参考著名漏扫XRAY的代码，无需Java环境直接从二进制角度构造Ysoserial的Payload

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

hackhttp

Hackhttp is an HTTP library, written in Python.

hacking-with-golang

Golang安全资源合集

hackjava

《深入理解Java代码审计》