5683xc Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

aggressorscripts

Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources

asset-scan

asset-scan是一款适用甲方企业的外网资产周期性扫描监控系统

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk

auto-earn

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

awae-prep

blueshell

红蓝对抗跨平台远控工具

bluespawn

Windows-based Active Defense and EDR tool to empower Blue Teams

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

caldera

Automated Adversary Emulation

cobaltstrike

CobaltStrike's source code

crawlergo

A powerful dynamic crawler for web vulnerability scanners

ctf-writeups

Writeups of Capture The Flag Competitions

ctftraining

CTF Training 经典赛题复现环境

cve-2020-0601

PoC for CVE-2020-0601

dark-shell

Shell say no to NIDS

datasci-ctf

A capture-the-flag exercise based on data analysis challenges

defcon27_csharp_workshop

Writing custom backdoor payloads with C# - Defcon 27 Workshop

docker-k8s-exploit-demo

for product alert demo

dorabox

DoraBox - 基础Web漏洞训练靶场

elasticstack

FIles and guides related to using Elasticstack as a SIEM

erebus

CobaltStrike后渗透测试插件

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gin-vue-admin

基于gin+vue搭建的后台管理系统框架，集成jwt鉴权，权限管理，动态路由，分页封装，多点登录拦截，资源权限，上传下载，代码生成器，表单生成器等基础功能，更多功能正在开发中，欢迎issue和pr~

google-ctf

Google CTF

h1ve

An Easy / Quick / Cheap Integrated Platform

hacking-with-golang

Golang安全资源合集