uunoob Goto Github PK

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

g1ant5.github.io

godzilla

Godzilla source code

heapalign

heap align script

hitcon-training-writeup

Learn binary exploitation from angelboy's hitcon-training

httpwookiee

HTTPWookiee is an HTTP server and proxy stress tool (respect of RFC, HTTP Smuggling issues, etc). If you run an HTTP server project contact me for private repository access with more tests.

invoke-obfuscation

PowerShell Obfuscator

jdsrc-small-classroom

京东SRC小课堂系列文章

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

leavemehere.github.io

libptmalloc

Heap analysis tooling for ptmalloc

libssh-mirror

lime-rat

LimeRAT | Simple, yet powerful remote administration tool for Windows

macro_pack

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.

maliciousmacromsbuild

Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass.

metasploit-framework

Metasploit Framework

myserver

Server

net-creds

Sniffs sensitive data from interface or pcap

netdllspy

.NET后渗透下的权限维持，附下载DLL

passmaker

可以自定义规则的密码字典生成器,支持图形界面 A password-generator that base on the rules that you specified

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_case

用于记录分享一些有趣的案例

pentest_study

从零开始内网渗透学习

pentestscripts

Some scripts for penetration testing

php-extension-backdoor

Simple php backdoor based on extension

phpinfo_scanner

一个抓取phpinfo重要信息的小工具

pochubs

PocHubs是为了整合网上知名开源框架的漏洞详细和POC

proxy_for_sqlmap

额，我只是把两个别人的东西搞到了一起

ptmalloc-fanzine

pyjfuzz

PyJFuzz - Python JSON Fuzzer