uppentest Goto Github PK

oracle_java_shell_client

oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端，通常用于正向连接

owa-toolkit

Powershell module to assist in attacking Exchange/Outlook Web Access

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

p0wnedshell

PowerShell Runspace Post Exploitation Toolkit

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

payloads

Git All the Payloads! A collection of web attack payloads.

pentest_study

pentester_fully-automatic-scanner

定向全自动化渗透测试

pentestly

Python and Powershell internal penetration testing framework

phishlulz

php-backdoors

A collection of PHP backdoors. For educational or testing purposes only.

php-extension-backdoor

Simple php backdoor based on extension

phpcodz

Php Codz Hacking

poc-t

插件化并发框架，支持多线程和协程(单线程异步)两种并发模式．可用于: 批量漏洞验证，爆破&扫描，爬虫&采集

poccollect

a plenty of poc based on python

pocscan

Will to be a niubility scan-framework

pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

poshrat

PowerShell Reverse HTTPs Shell

potato

Windows privilege escalation through NTLM Relay and NBNS Spoofing

powershell-github-shell

powershell-suite

My musings with PowerShell

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project.

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pupy

Pupy is a remote administration tool with an embeded Python interpreter, allowing its modules to load python packages from memory and transparently access remote python objects. The payload is a reflective DLL and leaves no trace on disk

pwnginx

Pwn nginx - a nginx backdoor provides shell access, socks5 tunneling, http password sniffing.

pyshell

PyShell makes interacting with web-based command injection less painful, emulating the feel of an interactive shell as much as possible.

python-hacker-code

《python黑帽子：黑客与渗透测试编程之道》代码及实验文件，字典等

quasarrat

Remote Administration Tool for Windows