p1ach01 Goto Github PK

flash-pop

Flash钓鱼弹窗优化版

fofax

fofax is a command line query tool based on the API of https://fofa.info/, simple is the best!

fuso

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

garble

Obfuscate Go builds

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cross-platform CobaltStrike Beacon bypass anti-virus, supports 4.1+ version.

golangbypassav

研究利用golang各种姿势bypassAV

goldeneye

GoldenEye Layer 7 (KeepAlive+NoCache) DoS Test Tool

golin-

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

havoc

The Havoc Framework

howtocook

程序员在家做饭方法指南。Programmer's guide about how to cook at home (Chinese only).

hw

护网漏洞汇总

incloud-1

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了十种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

landray-oa-treexml-rce

蓝凌OA远程代码执行漏洞批量检查

learning_summary

myexploit

OAExploit

ninjacopy

Powershell to copy ntds.dit

penetration-suite-toolkit

本项目制作的初衷是帮助渗透新手快速搭建工作环境，工欲善其事，必先利其器。

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentestdb

各种数据库的利用姿势

php-code

通过ThinkPHP框架学习PHP代码审计

poc_and_exp

搜集的或者自己写的poc或者exp

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

proxyvulns

[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.

qps

rdp-arsenal

RDP pentest tools & scripts

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

redteam-tools

红队作战中的一些工具分享。