dp4ng Goto Github PK

hunter

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

intang

iosapphook

专注于非越狱环境下iOS应用逆向研究，从dylib注入，应用重签名到App Hook

iossecaudit

iOS Security Audit Toolit - A semi-automatic tool for iOS App security audit and iOS reverse engineering

juicypotato

Modifying JuicyPotato to support load shellcode and webshell

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kerberoast

learning-golang

Go 学习之路：Go 开发者博客、Go 微信公众号、Go 学习资料（文档、书籍、视频）

linux-kernel-exploits

linux-kernel-exploits Linux平台提取漏洞集合

massmap

Combined port scanning w/ Masscan's speed & Nmap's scanning features.

meshcentral

A complete web-based remote monitoring and management web site. Once setup you can install agents and perform remote desktop session to devices on the local network or over the Internet.

metasploit-framework

Metasploit Framework

micro8

needle

The iOS Security Testing Framework.

nmap-silent-installation

nmap silent installation on windows

ntdsdumpex

NTDS.dit offline dumper with non-elevated

other

pandownload.com-resource

pandownload.com-resource

pentest_study

从零开始内网渗透学习

pentesting-toolkit

Tools for pentesting, CTFs & wargames.

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection

pycmd

python+php+jsp WebShell（一句话木马）

python-promoting-privileges

Windows_Mysql_提权

qqgroup-visualization

QQ群关系可视化查询3D力导向图，数据库已经更新

rdpwrap

RDP Wrapper Library

redteamtools

记录自己写的部分工具

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

reverse-shell-generator

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

scripts

工作中用到的一些脚本