om1jerry Goto Github PK

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

invoke-obfuscation

PowerShell Obfuscator

langsrccurise

SRC子域名资产监控

lazagne

Credentials recovery project

lizhi

李志所有歌曲下载地址

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mayinglong

micro8

Gitbook

mysqlmonitor

MySQL实时监控工具(代码审计/黑盒/白盒审计辅助工具)

nodejsscan

nodejsscan is a static security code scanner for Node.js applications.

nonebot

基于 酷Q 的 Python 异步 QQ 机器人框架

nw-tips

win内网_域控安全

oneforall

OneForAll是一款功能强大的子域收集工具

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

pentest-tools

内网渗透工具

php_bugs

PHP代码审计分段讲解

poc-bank

Focus on cybersecurity | collection of PoC and Exploits

pochub

PoC，attack，scan，redteam，vulnerable-manage

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

prepare-for-awd

AWD攻防赛脚本集合

printnightmare

ptscan

Phantom scanner——An interface friendly and lightweight web assets scanner

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

recon-pipeline

An automated target reconnaissance pipeline.

redis-rogue-server

Redis 4.x/5.x RCE

rediswritefile

通过 Redis 主从写出无损文件

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

redteamer

红方人员作战执行手册