banishdream Goto Github PK

att-ck-cn

ATT&CK实操

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

behinder

“冰蝎”动态二进制加密网站管理客户端

bloodhound

Six Degrees of Domain Admin

blueteamtools

蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。

bufferfly

攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。

chunked-coding-converter

Burp suite 分块传输辅助插件

cornershot

Amplify network visibility from multiple POV of other hosts

crypto-browserify

partial implementation of node's `crypto` for the browser

cve-2021-3156

PoC for CVE-2021-3156 (sudo heap overflow)

cve-2021-3157

cvemonitor

faketoa

TCP IP伪造,建议使用 ubuntu 22.04

fastjson_rce_tool

fastjson命令执行自动化利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP

frida-unpack

基于Frida的脱壳工具

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gophish

Open-Source Phishing Toolkit

gpt-pilot

Dev tool that writes scalable apps from scratch while the developer oversees the implementation

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hackeronereports

Here you can find mostly all disclosed h1 reports

impacket-examples-windows

The great impacket example scripts compiled for Windows

inscan

边界打点后的自动化渗透工具

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kill_webshell_detect

总结了免杀webshell的方法论

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

lspider

LSpider 一个为被动扫描器定制的前端爬虫

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.