lusunx Goto Github PK

aboutsecurity

字典、payload、基础设施搭建

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

biu

网络资产发现、漏洞扫描

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike

CobaltStrike's source code

dpapitk

DPAPI decrypt toolkit.

hackaspx

《ASPX安全-只有ASPX安全才能拯救.NET》Only ASPX Security Can Save The NET.

hardhatc2

A C# Command & Control framework

heat-rat

🔭Program for remote control of Windows computers. Huge functionality. It has full and lite versions.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

i-soon_ctf_2019

2019 第二届安洵杯 题目环境/源码

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

khepri

Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++.

laika

Cross-platform RAT, written in C

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

nuages

A modular C2 framework

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

penetrationlean

我的渗透学习笔记

pwntools

CTF framework and exploit development library

rengine2

shadowbroker

The Shadow Brokers "Lost In Translation" leak

sharpghosting

Process Ghosting in C#

shellcode-hide

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

thinkphp_gui_tools

ThinkPHP 漏洞 综合利用工具, 图形化界面, 命令执行, 一键getshell, 批量检测, 日志遍历, session包含, 宝塔绕过

wmiexec-regout

Modify version of impacket wmiexec.py, get output(data,response) from registry, don't need SMB connection, also bypassing antivirus-software in lateral movement like WMIHACKER.

xray_rad_fusion

高级版的深度融合一键使用把我馋的够呛 但是我没有高级版，又想要。说干就干于是决定自己撸了一个。算是勉强达到了融合效果吧。