ppofp Goto Github PK

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

ctf-all-in-one

CTF竞赛入门指南

ctf-training

收集各大比赛的题目和Writeup

ctf_awd_platform

CTF 攻防对抗平台

ctftraining

CTF Training 经典赛题复现环境

cve-2019-0230

CVE-2019-0230 Exploit POC

cve-2019-14287

Sudo exploit

cve-2020-24616-poc

cve-2020-24616 poc

cve-2021-43297-poc

CVE-2021-43297 POC

cve-2022-3699

Lenovo Diagnostics Driver EoP - Arbitrary R/W

cve-2023-21554-poc

CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve_2023_21554/

cveap

Send CVE information to the specified mailbox (from Github)

cvelist

Pilot program for CVE submission through GitHub

gourdscanv2

被动式漏洞扫描系统

hades

Static code auditing system

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

kubesploit

Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/自动化辅助框架

leakscan

在线漏洞扫描

legion_y7000series_hackintosh

适用于 Lenovo LEGION Y7000/Y7000P-2018、Y7000/Y7000P-2019、Y7000/Y7000P-2020、Y9000K-2018、Y9000K-2019、Y9000K-2020 系列安装 MacOS（支持MacOS 10.13.6 - MacOS Big Sur）For Lenovo LEGION Y530/Y540/Y545/Y730/Y740 series and legion 5i/legion 7 installation MacOS (support MacOS 10.13.6 - MacOS Big Sur)

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

local_hacktools

log-4j-exploit-fix

A simple plugin that prevents the Log4J exploit that allows for RCE, IP-Logging and server crashing

luscan-devel

根据Golismero源码二次开发的分布式漏洞扫描器(调试版)

maskfindshell

linux下webshell查杀工具

micro8

Gitbook

micro8-html

Micro8 Online

mimipenguin

A tool to dump the login password from the current linux user