chxx00123 Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-browser-exploit

awesome list of browser exploitation tutorials

bettercap

The Swiss Army knife for 802.11, BLE and Ethernet networks reconnaissance and MITM attacks.

binary-files

EarthWorm/Termite 停止更新

ctftool

Interactive CTF Exploration Tool

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

icmpsh

Simple reverse ICMP shell

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

micro8

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

phpggc

phuip-fpizdam

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powerupsql

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

pwn_jenkins

Notes about attacking Jenkins servers

python-fastcgi-client

A FastCGI Client for Python (directly communicate with fastcgi-server such as PHP-FPM etc.) NOTE: Do not support python 3.x.

redis-rce

Redis 4.x/5.x RCE

redis-rogue-server

Redis 4.x RCE

redismodules-executecommand

Tools, utilities and scripts to help you write redis modules!

rtiny-xss

The Xss Platform

shiro-721

Shiro-721 RCE Via RememberMe Padding Oracle Attack

shiro_exploit

Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities

tsh

Tiny SHell is an open-source UNIX backdoor.

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

vulhub

Docker-Compose files for vulnerability environments

xsstrike

Most advanced XSS scanner.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.