happy-everyday-sa Goto Github PK

aaaa

aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

amber

Reflective PE packer.

arkari

Yet another llvm based obfuscator based on goron.

arl-finger-add

灯塔（最新版）指纹添加脚本！

avlist

avList - 杀软进程对应杀软名称

awvs_xray

awvs和xray批量联动工具

beacon

Former attempt at creating a independent Cobalt Strike Beacon

blackout.go

kill AV/EDR

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bypassav

借助Win-PS2EXE项目编写cna脚本方便快速生成免杀可执行文件

bypassbehinder4j

冰蝎Java WebShell自动化免杀生成

chaos

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

crawlergo-to-xray

crawlergo-to-xray，可以把0Kee-Team crawlergo爬虫爬取的链接推送给长亭xray分析，xray分析后自动调用webhook接口利用server酱实时推送漏洞预警到微信，让你躺着挖漏洞。支持多线程。

crawlergo-xray

Linux-crawlergo and xray

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

cve

Gather and update all available and newest CVEs with their PoC.

cve-2020-12800

POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload

cve-2021-3156

Sudo Baron Samedit Exploit

cve-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

cve-2023-22515

Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具

dirsearch_dicc

dirsearch自用字典

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

edr-bypass-demo

Some demos to bypass EDRs or AVs by 78itsT3@m

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

eyejo

EyeJo是一款自动化资产风险评估平台，可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查，快速发现存在的薄弱点和攻击面。

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。