nhpt Goto Github PK

-cve-2022-22947-

cve-2022-22947 spring cloud gateway 批量扫描脚本

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2022-hw-poc

2022 护网行动 POC 整理

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

afl

american fuzzy lop - a security-oriented fuzzer

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

antsword-loader

AntSword 加载器

apache-mod_ssl-2.8.7-openssl--openfuckv2.c-

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

asp.net-deserialization-vulnerability-experiment

Asp.net deserialization vulnerability experiment based on XML

assetmanage

autogpt

AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

awesome-lowcode

国内低代码平台从业者交流

awesome-oscp

A curated list of awesome OSCP resources

bughound

Static code analysis tool based on Elasticsearch

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cdn-auto-cert

CDN HTTPS 证书自动更新，支持阿里云、腾讯云、华为云

chkrootkit

This program locally checks for signs of a rootkit. 'Forked' to fix false-positive for SucKIT rootkit

clash

A rule-based tunnel in Go.

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike

CobaltStrike's source code

cobaltstrike_cat_4.5

猫猫Cs:基于Cobalt Strike[4.5]二开 (原dogcs二开移植)

cobaltstrike_cna

使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。

codetest

脚本工具合集GUI版本，内置漏洞验证、利用模块，可自定义脚本实现批量验证。

cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。