yu5239 Goto Github PK

ahrid

AHRID - Analysis Hacker's Real-ID Platform

appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

apt_report

Interesting apt report collection and some special ioc express

csonvps

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计

ctf_hacker-tools

CTF-渗透测试~工具合集

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

cve-2023-21768-afd-for-winsock-eop-exploit

cybersecuritynote

信息安全笔记（JAVA安全、代码审计、红队攻防、渗透测试）

dict-hub

字典仓库：口令、子域名、Web接口、Web参数

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

gobyvuls

Vulnerabilities of Goby supported with exploitation.

hfish

🍯 A Most Convenient Honeypot Platform. 🐝🐝🐝 🐝🐝

honeypotcollection

蜜罐集合

http_server

实现http服务器，支持文件夹/文件上传和下载

invoke-adenum

Automate Active Directory Enumeration

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

log4j-payload-generator

Log4j jndi injects the Payload generator

log4j2-cve-2021-44228

Remote Code Injection In Log4j

log4j2-intranet-scan

log4j2内网扫描

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nopen

NOPEN Tool 又名“morerats” 莫雷斯特，是方程式工具包里的工具。

payloadsallthepdfs

PDF Files for Pentesting

pentesterspecialdict

Dictionary sets often used in penetration testing work , 渗透测试工作中经常使用的字典集。

pocsploit

a lightweight, flexible and novel open source poc verification framework

pyke-shiro

复杂请求下的Shiro反序列化利用工具

pystinger

bypass firewall by webshell 一款使用webshell进行流量转发的出网工具

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator