xiexueyuan Goto Github PK

php-webshells

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

phpsploit

Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor

pocassist

傻瓜式漏洞PoC测试框架

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

poshc2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

proxy_pool

Python爬虫代理IP池(proxy pool)

proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

pwntools

CTF framework and exploit development library

qingscan

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

quasar

Remote Administration Tool for Windows

quasibot

complex webshell manager, quasi-http botnet.

r0capture

安卓应用层抓包通杀脚本

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

remote-desktop-control

远程桌面控制(Spring+Netty+Swing)

remotecontrol

resnetgpt

用Resnet101+GPT搭建一个玩王者荣耀的AI

rudyjs

💀 R-U-DEAD-YET ? DOS Attack Implementation

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

schtask_0x727

创建隐藏计划任务，权限维持，Bypass AV

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sendmail

批量发送钓鱼邮箱

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

shad0w

A post exploitation framework designed to operate covertly on heavily monitored environments

shadowsocks-android

A shadowsocks client for Android

shadowsocks-libev

Bug-fix-only libev port of shadowsocks. Future development moved to shadowsocks-rust

shadowsocks-windows

A C# port of shadowsocks

shadowsocksr-windows

Ship of Theseus

sliver

Adversary Emulation Framework