h1ck0r Goto Github PK

localpotato

LocalPotato

log-viewer

Fast and beautiful Log Viewer for Laravel

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

logo-ls

Modern ls command with vscode like File Icon and Git Integrations. Written in Golang

luwu

红队基础设施自动化部署工具

marshalsec

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

masscan_to_nmap

基于masscan和nmap的快速端口扫描和指纹识别工具，优化版本(获取标题，页面长度,过滤防火墙)

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

myexploit

OAExploit一款基于产品的一键扫描工具。

mypsexec

demo PsExec

myscan

myscan 被动扫描

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nosqlilab

A lab for playing with NoSQL Injection

nosqlmap

Automated NoSQL database enumeration and web application exploitation tool.

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

npsmodify

这是nps的魔改，进行了流量特征的魔改，并且进行了漏洞的修复

onescan

OneScan是递归目录扫描的BurpSuite插件

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

oss-browser

OSS Browser 提供类似windows资源管理器功能。用户可以很方便的浏览文件，上传下载文件，支持断点续传等。

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pd-runner

Parallels Desktop Runner

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest-methodologies

渗透测试方法论

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

pentest_project

整理渗透测试、内网渗透、应急响应、密码字典、漏洞库、代码审计、渗透测试面试题相关项目

phobos

Phobos 是一款红队专用免杀木马生成器，采用 PEM 加密动态嵌入 XOR 的方式生成木马，生成木马可以自定义名称和ICO图标，为了延长免杀时间本工具暂时不开源。

php-unserialize-lib

php-unserialize-lib 是一个根据 php 反序列化工具 PHPGGC 对应编写而来的反序列化靶场，提供 PHPGGC 中大部分反序列化漏洞环境