crj0b Goto Github PK

cobra

Source Code Security Audit (源代码安全审计)

codeqlnote

Codeql学习笔记

cooolis-ms

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码，帮助红队人员更方便快捷的从Web容器环境切换到C2环境进一步进行工作。

cornershot

Amplify network visibility from multiple POV of other hosts

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

crackql

CrackQL is a GraphQL password brute-force and fuzzing utility.

cracksleeve

破解CS4.0

credsniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

crowdsec

CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.

cs-pushplus

使用免费支持微信模板消息推送的 PushPlus 进行上线主机提醒

cs-serverchan

CobaltStike 挂载脚本将上线主机信息通过 Server 酱通知到微信

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

csgo-dma-overlay

A basic CS:GO ESP utilising DMA and HDMI-Overlay

csharp-tools

.NET C# Tools

cve-2020-2555

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

cve-2023-23638

cvelist

Pilot program for CVE submission through GitHub

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

dcsec

域控安全one for all

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

dockerhistoryspecifying

DockerHistorySpecifying

domain

Setup script for Regon-ng

domain-penetration_one-stop

域渗透一条龙

domain_search_by_xray

调用xray中subdomian模块进行批量子域名收集

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

donut

DONUTS DONUTS DONUTS 🍩

dpat

Domain Password Audit Tool for Pentesters