col4-eng Goto Github PK
Type: User
Type: User
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
用于记录内网渗透(域渗透)学习 :-)
改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能
A flexible scanner
API Security Projecto aims to present unique attack & defense methods in API Security field
cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources
《Black.Hat.Go》中文翻译
An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability
免杀姿势学习、记录、复现。
六大云存储,泄露利用检测工具
云原生安全
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
Attempting to be an all in one repo for others' userful aggressor scripts as well as things we've found useful during Red Team Operations.
cobaltstrike4.4\4.3版本破解、去除checksum8特征、bypass BeaconEye
CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等,解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计
一款红队专用免杀木马生成器,基于shellcode生成绕过所有杀软的木马。
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
带带弟弟 通用验证码识别OCR pypi版
domain_hunter的高级版本,SRC挖洞、HW打点之必备!自动化资产收集;快速Title获取;外部工具联动;等等
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
ecapture是一款无需CA证书,就可以进行HTTPS通讯明文抓包的工具。
一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)
利用NTLM Hash读取Exchange邮件
Scan git repos (or files) for secrets using regex and entropy 🔑
This is learning to write windows 32 api instance code in the golang language
《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.
2018年初整理的一些内网渗透TIPS,后面更新的慢,所以整理出来希望跟小伙伴们一起更新维护~
Use to build an anonymous SMB file server.
Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.
a rep for documenting my study, may be from 0 to 0.1
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.