momika233 Goto Github PK

0day-rce-exploit-on-vbulletin-5xx

https://twitter.com/momika233

active-directory-pentest-notes

个人域渗透学习笔记

adampielak-nuclei-templates

All Nuclei Templates

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

ahmyth

Cross-Platform Android Remote Administration Tool | Official maintained repository for the AhMyth R.A.T Project | A dedicated revival of the original repository at https://GitHub.com/AhMyth/AhMyth-Android-RAT

ajenti-rce

Ajenti-RCE

alicloud-tools

阿里云ECS、策略组辅助小工具

allforone

am0n-eye

appproxyc2

arl

ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arl-plus-docker

基于斗象灯塔ARL修改后的版本。相比原版，增加了OneForAll、**数据库，修改了altDns

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

automated-subdomain-takeover

automated_incloud_scan

autopwn-suite

AutoPWN Suite is a project for scanning vulnerabilities and exploiting systems automatically.

awesome-radar-perception

A curated list of radar datasets, detection, tracking and fusion

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

blackdragon

An Adavnced Automation Tool For Web-Recon Developed For Linux Systems

blockchain_army_knife-wallet-cracker-with-multichian

A powerful wallet cracker/stealer with multichain|privatekey stealer|mnemonic stealer|Потужний зломщик гаманців з мультичай|区块链钱包碰撞工具支持多链|зіткнення гаманця|мнемонічна колізія|私钥碰撞|助记词碰撞|钱包破解|钱包碰撞|钱包找回|助记词找回

blueducky

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

bt_js

btcloud

PHP开发的宝塔面板第三方云端

bugbountyscanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

burp-suite-pro-scan-profiles

Custom scan profiles for use with Burp Suite Pro

c2-cloud

The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly interface.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cento310

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。