mabangde Goto Github PK

how-does-xmanager-encrypt-password

This is a repo to tell you how Xmanager encrypt password.

httpscan

一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR

hunter

(l)user hunter using WinAPI calls only

iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

iis_backdoor

backdoor

impacket

Impacket is a collection of Python classes for working with network protocols.

impacket-examples-windows

The great impacket example scripts compiled for Windows

impacket_static_binaries

Standalone binaries for Linux/Windows of Impacket's examples

incognito2

https://labs.mwrinfosecurity.com/tools/incognito/

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

inveigh

Inveigh is a Windows PowerShell LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

invoke-psimage

Embeds a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

invoke-thehash

PowerShell Pass The Hash Utils

invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k8cscan

大型内网渗透自定义插件化扫描器（附C#/VC/Delphi/Python插件Demo源码) 程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆、系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本

kerberoast

kerberos_enum_dict

枚举kerberos域用户的字典

keylogger

Basic keylogger in Go (no C deps)

keylogger-1

A C programmed invisible Keylogger

kibana_hanization

Kibana 中文汉化

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

ldeep

In-depth ldap enumeration utility

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

logkeys

A GNU/Linux keylogger that works!

logon_backdoor

automated sticky keys backdoor

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log