mabangde Goto Github PK

sqinner

A MSSQL service login bruteforcer and xp_cmdshell wrapper

static-binaries

Various *nix tools built as statically-linked binaries

struts-s2-xxx

整理收集Struts2漏洞环境

subdomainsbrute

A fast sub domain brute tool for pentesters

subtee-gits-backups

subTee gists code backups

subtee_allthethings

suricata-rules

Suricata IDS rules

sysmon-config

Sysmon configuration file template with default high-quality event tracing

sysmonsearch

Investigate suspicious activity by visualizing Sysmon's event log

sysmontools

Utilities for Sysmon

telemetry

WINDOWS TELEMETRY权限维持

terminal

The new Windows Terminal, and the original Windows console host -- all in the same place!

tinymet

A "tiny" meterpreter stager

titanium-web-proxy

A cross-platform asynchronous HTTP(S) proxy server in C#.

token-priv

Token Privilege Research

tools

security and hacking tools, exploits, proof of concepts, shellcodes, scripts

tyc_query

ueditorgetshell

UEditor编辑器批量GetShell / Code By:Tas9er

ultimateapplockerbypasslist

The goal of this repository is to document the most common techniques to bypass AppLocker.

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

usefull-code

usefull-code

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

vcenterkit

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

velociraptor

Digging Deeper....

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulscritp

内网渗透脚本

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

waf-bypass

WAF Bypass Cheatsheet

watchad2.0

WatchAD2.0是一款针对域威胁的日志分析与监控系统