drea1v1 Goto Github PK

butian_gongyi

bypassav

免杀shellcode加载器

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

cve-2019-2725

weblogic绕过和wls远程执行

drea1v1.github.io

小白帽Blog

es_data_export

ES数据导出工具，ES data export tool，elasticsearch data export tool，elasticsearch数据导出到文件，elasticsearch数据导出到数据库，目前已支持全部的6.x的版本,后续跟进更低的版本。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

github_dis

一款精简版github信息泄露搜集工具

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

metasploit-framework

Metasploit Framework

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

onlinetools

在线cms识别|旁站|c段|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..

openrasp

🔥Open source RASP solution

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

内网渗透的一些工具

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

smart_login

各大网站登陆方式，有的是通过selenium登录，有的是通过抓包直接模拟登录

sosemonuk

Sosemonuk加密算法

ssf

Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform

subdomainsbrute_batch

sweepmine

first game

tinyshop_poc

udfhack

Database takeover UDF repository

unblockneteasemusic

Solve unavailable songs for cloud music client

wangyimusic_download

webshell

这是一个WebShell收集项目

webshell-1

This is a webshell open source project

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合