n8v79a Goto Github PK

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

atlas

Quick SQLMap Tamper Suggester

autonse

Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner

axis2shell

brook

Brook is a cross-platform(Linux/MacOS/Windows/Android/iOS) proxy/vpn software

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

chart-sec

commix

Automated All-in-One OS command injection and exploitation tool.

cortana-scripts

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.

cve-2018-3191

CVE-2018-3191-PoC

exp

收集各种各样的exp

exploit

frida-unpack

基于Frida的脱壳工具

getkalitools

gixy

Nginx configuration static analyzer

goproxy

Proxy is a high performance HTTP(S), websocket, TCP, UDP,Secure DNS, Socks5 proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,防污染DNS,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,域名黑白名单,跨平台,KCP协议支持,集成外部API。

greatsct

The project is called Great SCT (Great Scott). Great SCT is an open source project to generate application white list bypasses. This tool is intended for BOTH red and blue team.

impacket-examples-windows

The great impacket example scripts compiled for Windows

iotseeker

Created by Jin Qian via the GitHub Connector

isf

ISF(Industrial Control System Exploitation Framework)，a exploitation framework based on Python

kms-activate

Microsoft Windows/Office 一键激活工具，基于kms.jm33.me的KMS服务器

lazagne

Credentials recovery project

mind-map

mindmap

onlinetools

在线cms识别|旁站|c段|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-and-development-tips

A collection of pentest and development tips

python-poc

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi