bmf4ck Goto Github PK

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.

awesome-pentest-note

渗透测试☞经验/思路/总结/笔记

backdoor

A Linux Kernel Module that adds a backdoor to your system

beurk

BEURK Experimental Unix RootKit

bofhound

Generate BloodHound compatible JSON from logs written by ldapsearch BOF and pyldapsearch

bruteforce-database

Bruteforce database

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

empire

Empire is a PowerShell and Python post-exploitation agent.

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

exploits

Miscellaneous exploit code

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

gitrob

Reconnaissance tool for GitHub organizations

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

micro8

Gitbook

mind-map

各种安全相关思维导图整理收集

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_dic

自己收集整理自用的字典

pentesting-scripts

A ton of helpful tools

platypus

:hammer: A modern multiple reverse shell sessions manager written in go

powersharppack

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

prism

PRISM is an user space stealth reverse shell backdoor, written in pure C.

pyldapsearch

Tool for issuing manual LDAP queries which offers bofhound compatible output