git0hub1 Goto Github PK

linux-kernel-exploitation

A collection of links related to Linux kernel security and exploitation

mind-map

各种安全相关思维导图整理收集

movie_data_capture

Local Movies Organizer

nacosexploitgui

Nacos漏洞综合利用GUI工具，集成了默认口令漏洞、SQL注入漏洞、身份认证绕过漏洞、反序列化漏洞的检测及其利用

njrat

NjRAT is a Remote Administration Tool. This repository contains a Njrat Editions.

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

portbrute

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD

powermeup

A small library of powershell scripts for post exploitation that you may need or use! It is also a custom reverse shell that you can use to add modules of your choice and not be stuck to things you do not need or use!

powershell-obfuscation

powershell免杀混淆器，简单有效，VT全过。A simple and effective powershell obfuscaiton tool bypass Anti-Virus

python-upload

python上传文件到oss，数据，服务器等等脚本

pythonupload

Basic HTTP(s) Web Server with upload and download

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

rakshasa

基于go编写的跨平台、稳定、隐秘的多级代理内网穿透工具

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

sbscan

SBSCAN是一款专注于spring框架的渗透测试工具，可以对指定站点进行spring boot敏感信息扫描以及进行spring相关漏洞的扫描与验证。

searchall

shadowrocket-adblock-rules-forever

提供多款 Shadowrocket 规则，拥有强劲的广告过滤功能。每日8时重新构建规则。

sliver

Adversary Emulation Framework

sshdhooker

One-click injection into the SSHD process to record and send the password for ssh login

sshlooterc

It's the C version of https://github.com/mthbernardes/sshLooter

starmap

一个轮子融合的子域名收集小工具

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

struts2-scan

Struts2全漏洞扫描利用工具

subdomain_shell

一键调用subfinder+ksubdomain+httpx 强强联合 从域名发现-->域名验证-->获取域名标题、状态码以及响应大小 最后保存结果,简化重复操作命令

sucrack

supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

svn-extractor

simple script to extract all web resources by means of .SVN folder exposed over network.

swagger-hack

自动化爬取并自动测试所有swagger接口

thinkphp-vuln

关于ThinkPHP框架的历史漏洞分析集合

tools