bonecard Goto Github PK

aptnotes

Various public documents, whitepapers and articles about APT campaigns

att-ck_file

blasting_dictionary

爆破字典

caldera

Automated Adversary Emulation

cobalt_strike_wiki

Cobalt Strike系列

ctf-wiki

CTF Wiki Online

dnsteller

Mass zone transfer python script

docker-images

Official source for Docker configurations, images, and examples of Dockerfiles for Oracle products and projects

fuzz-wooyun-org

WooYun Fuzz 库

gules-warning

httpie

Modern command line HTTP client – user-friendly curl alternative with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc. https://httpie.org

mastering-emacs-in-one-year-guide

Be great at emacs in one year

micro8

oh-my-zsh

🙃 A delightful community-driven (with 1,300+ contributors) framework for managing your zsh configuration. Includes 200+ optional plugins (rails, git, OSX, hub, capistrano, brew, ant, php, python, etc), over 140 themes to spice up your morning, and an auto-update tool so that makes it easy to keep up with the latest updates from the community.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

secistsploit-framework

A pentesting framework written in python

see_world

shadowsocks-android

A shadowsocks client for Android

ta_tq1

dfas

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w11scan

分布式WEB指纹识别平台 Distributed WEB fingerprint identification platform

wappalyzer

Cross-platform utility that uncovers the technologies used on websites.

webvulscan

Web Application Vulnerability Scanner.

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

yujianrdpcrack

御剑RDP爆破工具