net2net Goto Github PK

ad-attack-defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

avet

AntiVirus Evasion Tool

backdoors

Simple linux backdoors and hiding techniques

blasting_dictionary

爆破字典

bloodhound

Six Degrees of Domain Admin

brootkit

Lightweight rootkit implemented by bash shell scripts v0.10

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cms-hunter

CMS漏洞测试用例集合

collection-document

Collection of quality safety articles

commix

Automated All-in-One OS command injection and exploitation tool.

crackmapexec

A swiss army knife for pentesting networks

ctftraining

CTF Training 经典赛题复现环境

cub3

Proof of concept for LD_PRELOAD malware that uses extended attributes to protect files.

dirbrute

多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

dvta

Damn Vulnerable Thick Client App

empire

Empire is a PowerShell and Python post-exploitation agent.

exploit-database

The official Exploit Database repository

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

f-scrack

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

generate-macro

This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.

hackbar

HackBar plugin for Burpsuite v1.0

hostrecon

This function runs a number of checks on a system to help provide situational awareness to a penetration tester during the reconnaissance phase. It gathers information about the local system, users, and domain information. It does not use any 'net', 'ipconfig', 'whoami', 'netstat', or other system commands to help avoid detection.

impacket

Impacket is a collection of Python classes for working with network protocols.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

inveigh

Inveigh is a Windows PowerShell LLMNR/mDNS/NBNS spoofer/man-in-the-middle tool

invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator