rsfl Goto Github PK

022024ai

adfspoof

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

attack_range_local

Build a attack range in your local machine

blog

blogs

chiron-elk

cloud-datamodel-security-research

A data model for cloud providers (AWS, GCP, Azure) based on security use cases

code

ctfd

CTFs as you need them

cve

Gather and update all available and newest CVEs with their PoC.

dronesploit

Drone pentesting framework console

empire

Empire is a PowerShell and Python post-exploitation agent.

flare-vm

git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and various other AV solutions, solely based on http(s) traffic.

impacket

Impacket is a collection of Python classes for working with network protocols.

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

log4shell-vulnerable-app

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

metasploit-framework

Metasploit Framework

mimikatz

A little tool to play with Windows security

nmap-vulners

NSE script based on Vulners.com API

octosuite

Advanced Github OSINT Framework

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

post-exploitation-wiki

Post Exploitation Wiki

projects

binaries, ova, docker, vagrant stuff

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pycrypt

Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products

researchdocs

PDFS, Presentations, etc

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user