d4rkduck Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

0xagent

CobaltStrike 4.0 - 4.5 Patch

2021hvv_vul

2021hvv漏洞汇总

2022-hw-poc

2022 护网行动 POC 整理

abptts

TCP tunneling over HTTP/HTTPS for web application servers

active-directory-pentest-notes

个人域渗透学习笔记

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

ad-penetration-testing-tools

域渗透工具

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin? (Commerical versions available from NetSection)

adcollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

adinfo

域信息收集工具

adobe-flash-phishing-page

Adobe Flash Phishing Page(Adobe Flash钓鱼页面)

advanced-process-injection-workshop

aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

aksk_tool

AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI执行命令，OSS/COS/S3管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等

alcatraz

x64 binary obfuscator

android-developer-blog-cn

定期翻译Android官方博客

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

apt38-0day-stealer

APT38 Tactic PoC for Stealing 0days

apt_report

Interesting APT Report Collection And Some Special IOC

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

att-ck-cn

ATT&CK实操

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

av-epp-edr-windows-api-hooking-list

Depending on the AV/EDR we will check which Windows APIs are hooked by the AV/EDR

avbypass

一款Web在线自动免杀工具

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources