daoshilingyugewu Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

amnesiac

Amnesiac is a post-exploitation framework entirely written in PowerShell and designed to assist with lateral movement within Active Directory environments

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.

awesome-windows-kernel-security-development

windows kernel security development

brute-ratel-c4-community-kit

This repository contains scripts, configurations and deprecated payload loaders for Brute Ratel C4 (https://bruteratel.com/)

burpsuite

Burp Suite loader version --> ∞

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

command

红队常用命令速查

darksteel

域内自动化信息搜集利用工具

easy-exploits

Exploits of different CVE IDs (CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451, CVE-2021-41753, CVE-2021-41788, CVE-2021-46353)

fullbypass

A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage PowerShell reverse shell. Feel free to modiy and DM if you find some bugs :)

goby_poc_redteam

致力于收集Goby PoC，请勿用于非法操作，后果自负。

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

i-s00n

安洵信息

information_security_books

信息安全方面的书籍书籍

invoke-obfuscation

PowerShell Obfuscator

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

kernelhub

:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

linuxtq

《Linux提权方法论》@0e0w

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

mimikatzbypass

新免杀方向 Mimikatz（猕猴桃） 免杀 360，火绒，电脑管家，WindowsDefinder，详细使用教程请参考博客：https://boke.vpss.cc/9.html

mind-map

各种安全相关思维导图整理收集

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

my-software-reverse-engineering

逆向学习笔记总结

ola

osce3-notes

osep-code-snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

osep_fireghost

osep学习笔记 代码

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF