t3st0r-git Goto Github PK

mysqlt

伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nessus_to_report

Nessus中文报告自动化脚本

nginx_log_check

Nginx日志安全分析脚本

nodejs-red-team-cheat-sheet

NodeJS Red-Team Cheat Sheet

ntdsdumpex

NTDS.dit offline dumper with non-elevated

oneforall

OneForAll是一款功能强大的子域收集工具

passive-scan-client

Burp被动扫描流量转发插件

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

tools

pentest_study

从零开始内网渗透学习

pentestdb

WEB渗透测试数据库

perun

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

phpwaf

2333，終結線下WEB(PHP)攻防

playwright-python

Python version of the Playwright testing and automation library.

proxy_admin_free

A powerful web console of snail007/goproxy .

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

pwcracker

一款插件化的密码爆破框架

pwntools

CTF framework and exploit development library

quasarrat

Remote Administration Tool for Windows

rat-njrat-0.7d-modded-source-code

NJR

rediswritefile

通过 Redis 主从写出无损文件

rogue-mysql-server

MySQL fake server for read files of connected clients

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

sharpsqltools

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。

shiro_rce

shiro rce 反序列 命令执行 一键工具

sjavawebmanage

SJavaWebManage 采用低版本jdk1.3开发的网站管理工具，支持文件管理/命令执行/数据库管理。

sqlmap4burp-plus-plus

sqlmap4burp++是一款兼容Windows，mac，linux多个系统平台的Burp与sqlmap联动插件

ssrfmap

Automatic SSRF fuzzer and exploitation tool

t3st0r-git