office-of-tailored-access-operations Goto Github PK

--

Web安全攻防渗透测试实战指南

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

apt-guid

APT-GUID

aquatone

A Tool for Domain Flyovers

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

atscan

Advanced dork Search & Mass Exploit Scanner

awesome-oscp

A curated list of awesome OSCP resources

bbscan

A fast vulnerability scanner

beroot

Privilege Escalation Project - Windows / Linux / Mac

birdwatcher

Data analysis and OSINT framework for Twitter

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

bug-bounty

Ressources for bug bounty hunting

bug-bounty-toolz

BBT - Bug Bounty Tools

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

c1h2e1.github.io

castlebravo

CastleBravo - BugBounty Automation Tool

chunked-coding-converter

Burp suite 分块传输辅助插件

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

dictionary

Own collection dictionary

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

emp3r0r

linux post-exploitation framework made by linux user

ffuf

Fast web fuzzer written in Go

fscan

一款内网扫描工具，方便一键大保健~

fuxploider

File upload vulnerability scanner and exploitation tool.