smartzh Goto Github PK

2021_hvv

2021 hw

2021hvv_vul

2021hvv漏洞汇总

as-exploits

**蚁剑后渗透框架

atlas

Quick SQLMap Tamper Suggester

awesome-security-collection

1000+ Github Security Resource Collection Repos.

awvs-decode

awvs script decode 最新最好的解码方法

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chunked-coding-converter

Burp suite 分块传输辅助插件

cobalt-wipe

Cobalt wipe is the non-commercial version of Cobalt-Strike 4.3 (May 2021 Release)

cobaltstrike

Code and yara rules to detect and analyze Cobalt Strike

cobaltstrike4.0_related

破解的cs4.0、cs4.0官方手册翻译和一些笔记

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

cve-2020-1350

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

cve-2021-21972

VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本

cve-2021-21973

CVE-2021-21972 Exploit

cve-2021-21985

CVE-2021-21985 VMware vCenter Server远程代码执行漏洞 EXP (更新可回显EXP)

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

fapro

Fake Protocol Server

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

渗透测试路径字典，爆破字典。内容来自互联网和实战积累。

go_parser

Yet Another Golang binary parser for IDAPro

hw-gui-poc-exp

脚写HW爆出来的漏洞的GUI工具

hyenae-ng

Hyenae NG is an advanced cross-platform network packet generator and the successor of Hyenae. It features full network layer spoofing, pattern based address randomization and flood detection breaking mechanisms.

infosec-black-friday

All the deals for InfoSec related software/tools this Black Friday

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

junoscriptorium

A repository for scripts and script libraries

k8cscan

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

mdut

MDUT - Multiple Database Utilization Tools

ms17010_allinone