yearnming Goto Github PK

infoscripts

一个渗透测试/SRC挖掘中用于信息收集的脚本集合，面向安全从业者、学习人员，严禁用于非法用途。

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsonexp

fastjson漏洞批量检测工具

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

l4sh

Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.

listrdpconnections

C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j-scanner

log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.

mooder

Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

mythic

A collaborative, multi-platform, red teaming framework

nimshellcodeloader

使用nim编写的shellcode加载器

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-docs

Nuclei documentation

ola

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pdtm

ProjectDiscovery's Open Source Tool Manager

pdtm_utils

Helper Libraries

pentestdb

各种数据库的利用姿势

pwdbud

一款SRC密码生成工具，尝试top字典无果后，可以根据域名、公司名等因素来生成特定的字典

pythonhackingbook1

Python黑客编程之极速入门

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

rezerobypassav

从零开始学免杀

scf-proxy

scfproxy

A little proxy tool based on Tencent Cloud Function Service.

shellcodeloader

shellcodeloader

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.