catandcoffee Goto Github PK

assetshunter

资产狩猎框架-AssetsHunter，信息收集是一项艺术~

catandcoffee.github.io

My Hexo blog

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

homework-of-c-language

C/C++ code examples of my blog.

impost3r

👻Impost3r -- A linux password thief

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

mimipenguin

A tool to dump the login password from the current linux user

playground

练手用的

powershell-suite

My musings with PowerShell

proxytoolkits

ruadmin

ruadmin is a logon *Brute Force* tool, for windows privilege escalation, but also system management.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

toolbox

学习过程中遇到的一些小脚本

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnerability-wiki

“Vulnerability-Wiki” 项目备份

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

webshell

This is a webshell open source project