starscow Goto Github PK

bloodhound

Six Degrees of Domain Admin

cobaltstrike_cna

使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dumpall

一款信息泄漏利用工具，适用于.git/.svn源代码泄漏和.DS_Store泄漏

examples-of-web-crawlers

一些非常有趣的python爬虫例子,对新手比较友好,主要爬取淘宝、天猫、微信、豆瓣、QQ等网站。(Some interesting examples of python crawlers that are friendly to beginners. )

filemonitor

文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

fofa_search

利用fofa api搜索host、ip、domain、port、title的一款工具

fofapoc

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

jrand-github

Config files for my GitHub profile.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合