wisdark Goto Github PK

foca

fortinet-ssl-vpn-bruteforce

Bruteforces Fortinet SSL VPNs

freebokuloader

A simple BOF that frees UDRLs

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fscan

一款内网扫描工具，方便一键大保健~

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

functionstomping

A new shellcode injection technique. Given as C++ header, standalone Rust program or library.

fuse

A penetration testing tool for finding file upload bugs (NDSS 2020)

fuso

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

fuzz.txt

Potentially dangerous files

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gcat

A PoC backdoor that uses Gmail as a C&C server

geotrust

Signing keys

ghidra

Ghidra is a software reverse engineering (SRE) framework

ghost-in-the-logs

Evade sysmon and windows event logging

ghostmirror

通过webshell实现的内网穿透工具

ghostunnel

A simple SSL/TLS proxy with mutual authentication for securing non-TLS services

ghostwriter

The SpecterOps project management and reporting engine

ghunt

🕵️‍♂️ Investigate Google Accounts with emails.

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gitjacker

🔪 :octocat: Leak git repositories from misconfigured websites

gitminer

Tool for advanced mining for content on Github

giuda

Ask a TGS on behalf of another user without password

go-clr

A PoC package for hosting the CLR and executing .NET from Go

go-secdump

Tool to remotely dump secrets from the Windows registry

go-sqlcmd

The new sqlcmd, CLI for SQL Server and Azure SQL (winget install sqlcmd / sqlcmd create mssql / sqlcmd open ads)

go365

An Office365 User Attack Tool

goby-poc

439个goby poc，可能会有重复自行判断，来源于网络收集的Goby&POC，实时更新。

goddi

goddi (go dump domain info) dumps Active Directory domain information