dr-dot-droid Goto Github PK

0autocheck

awesome-webshell

Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

command

红队常用命令速查

crossc2

generate CobaltStrike's cross-platform payload

cve-2021-22005

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

godzilla

哥斯拉

hack-requests

The hack-requests is an http network library for hackers

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kernelhub

:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

linux-command

Linux命令大全搜索工具，内容包含Linux命令手册、详解、学习、搜集。https://git.io/linux

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

php-webshells

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

pocorexp_in_github

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

struts2-052-poc

A vulnerability verification script for S2-052

thinkphpgui

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

webshell-bypassed-human

过人 webshell 的生成工具

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

wpxmlrpcbrute

Brute force WordPress sites vulnerabile to XML-RPC amplification.

xray-crack

xray社区高级版证书生成，仅供学习研究，正常使用请支持正版