raspberryhusky Goto Github PK

remote-method-guesser

Java RMI Vulnerability Scanner

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

rogue_mysql_server

一个支持 go, php, python, java, 原生命令行等多种语言下客户端的 mysql 恶意服务器

rsmaker

基于rust的免杀、捆绑框架

rubeus-gui

GUI alternative to the Rubeus command line tool, for all your Kerberos exploit requirements

rust_proc_list

Get Windows Process List in Rust

security-ppt

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

seeyou_exp

致远OA漏洞综合利用脚本

sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

sharpbypassuac

C# tool for UAC bypasses

sharpcradle

sharpghosting

Process Ghosting in C#

sharpimpersonation

A User Impersonation tool - via Token or Shellcode injection

sharpmemshell

HttpListener shell in csharp.

sharpsqltools

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。

sharpxdecrypt

Xshell全版本密码解密工具

sleep_powershell_encoder

使用sleep脚本实现的powershell encoder

sqlmap4burp-plus-plus

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

stracciatella

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

sunflower_get_password

一款针对向日葵的识别码和验证码提取工具

swagger-exp

A Swagger API Exploit

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

toml

汤小明语的官方文档汉化。唯一不依赖缩进的完美配置文件格式。Wiki 中有教程。

traitor

:arrow_up: :skull_and_crossbones: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket

userclone-rs

windows用户上下文克隆，基于rust

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

watson

Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities

wiki-website

Support site for Markdown Editor Typora

win32api-practice

Offensive tools written for practice purposes

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合