- 👋 Hi, I’m @d4rkduck
- 👀 I’m interested in FuckTheWorld
- 🌱 I’m currently learning FuckTheWorld
- 💞️ I’m looking to collaborate on ...
- 📫 How to reach me ...
d4rkduck Goto Github PK
Name: D4rkduck
Type: User
Bio: Learning
Location: moon
Name: D4rkduck
Type: User
Bio: Learning
Location: moon
渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
A collection of pentest and development tips
渗透测试☞经验/思路/想法/总结/笔记
Intranet penetration tools
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
渗透测试常规操作记录
从零开始内网渗透学习
一些渗透姿势记录
《PHP代码审计入门指南》 这本指南包含了我在学习PHP代码审计过程中整理出的一些技巧和对漏洞的一些理解
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Powershell攻击指南----黑客后渗透之道
powershell命令免杀的小工具,可过Defender、360等,可执行上线cobaltstrike、添加计划任务等。 A powershell loader bypass anti-virus
Python爬虫代理IP池(proxy pool)
Cobalt Strike random C2 Profile generator
ratel(獾) 是由rust开发的红队信息搜集,扫描工具,支持从fofa,zoomeye API查询,主动扫描端口,提取https证书域名,自定义poc,输出xlsx格式。
OpenSource Poc && Vulnerable-Target Storage Box.
Red-Team Attack Guid
Wiki to collect Red Team infrastructure hardening resources
BCS(北京网络安全大会)2019 红队行动会议重点内容
Tools and Techniques for Red Team / Penetration Testing
红队笔记
日常积累的一些红队工具及自己写的脚本,更偏向于一些diy的好用的工具,并不是一些比较常用的msf/awvs/xray这种
Cobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
从零开始学免杀
🤖 The Modern Port Scanner 🤖
此项目用来提取收集以往泄露的密码中符合条件的强弱密码
Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty...
A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑
记录安全方面的笔记/工具/漏洞合集
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.