aoe0221 Goto Github PK

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arl-npoc

ARL-Core官方仓库备份项目：集漏洞验证和漏洞利用的一个框架

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

burpextend

基于Burp插件开发打造渗透测试自动化

cve-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

dirsearch

Web path scanner

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

githack

A `.git` folder disclosure exploit

lxhtoolhttpdecrypt

Simple Android/iOS protocol analysis and utilization tool

machinelearning

Machine Learning in Action（机器学习实战）

other

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_study

从零开始内网渗透学习

rogue-mysql-server

Rogue MySql Server

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

zentracer

an android method tracer gui tool base-on frida

zero-box

零组小工具