websec123 Goto Github PK

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

kibana

Your window into the Elastic Stack

kkndme_tianya

天涯 kkndme 神贴聊房价

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

learn_python3_spider

python爬虫教程系列、从0到1学习python爬虫，包括浏览器抓包，手机APP抓包，各种爬虫涉及的模块的使用，如：requests、beautifulSoup、selenium、appium、scrapy等，以及IP代理，验证码识别，Mysql，MongoDB数据库的python使用，多线程多进程爬虫的使用，css 爬虫加密逆向破解，JS爬虫逆向，爬虫项目实战实例等

maltrail

Malicious traffic detection system

mind-map

各种安全相关思维导图整理收集

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

nmap-nse-scripts

My collection of nmap NSE scripts

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

passworddic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典

patoolkit

PA Toolkit is a collection of traffic analysis plugins focused on security

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

redteam-bcs

BCS（北京网络安全大会）2019 红队行动会议重点内容

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

scan-backup-langzi-

扫描备份文件和敏感信息泄漏的扫描器，速度快，器大活好

sec-chart

安全思维导图集合

sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

securitymanagement

分享在建设安全管理体系、ISO27001、等级保护、安全评审过程中的点点滴滴

securitytechnique

Security technique research and some funny work on it !

shadow-vulscan

some_pocsuite

用于漏洞排查的pocsuite3验证POC代码

spoofweb

一键部署HTTPS钓鱼站

spring-core-rce

Spring core rce

ssh-scanner

ssh password guessing，ssh登录密码破解

summit_ppt

各种安全大会PPT PDF