guhuisec Goto Github PK

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

kerberosuserenum

Kerberos accounts enumeration taking advantage of AS-REQ

mediaparser

仿照windows上的mp4info做的QT版MP4解析工具，方便在mac上使用

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

ms16-032

windows 支持03-12全版本服务器以及部分在桌面操作系统上运行的服务 本地提权 MS16-032(CVE-2016-0099) for SERVICE ONLY

muddyc3

Leaked Muddyc3 C2 source.

muddyc3v1.0.1-

This is the MuddyWater APT C3 v1.0.1 Source

nishang

Nishang是基于PowerShell的渗透测试专用工具。集成了框架、脚本和各种payload。这些脚本是由Nishang的作者在真实渗透测试过程中有感而发编写的，具有实战价值。包括了下载和执行、键盘记录、dns、延时命令等脚本 Nishang - Offensive PowerShell for penetration testing and offensive security.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest

tools

pentestscripts

Some scripts for penetration testing

player.js

Interact with and control an embedded Vimeo Player.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

powertools

域渗透ps脚本集合 PowerTools is a collection of PowerShell projects with a focus on offensive operations.

ppthub

大安全各领域各公司各会议分享的PPT及行业合规、安全认证、安全书籍汇总

s

The simple, fast, powerful SYN/TCP port scanner source code

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_whitepapers

Collection of misc IT Security related whitepapers, presentations, slides - hacking, bug bounty, web application security, XSS, CSRF, SQLi

sharpshooter

Payload Generation Framework

shellshock_scanner

Python Scanner for "ShellShock" (CVE-2014-6271)

sleek-dashboard

Sleek Dashboard - Free Bootstrap 4 Admin Template and UI Kit

socks5

simple socket5 server

some-local-exp

一些提权exp

springboot

springboot 框架与其它组件结合如 jpa、mybatis、websocket、security、shiro、cache等

talkrep

taskschedlpe

Task Scheduler LPE by SandboxEscaper

the-way-to-go_zh_cn

《The Way to Go》中文译本，中文正式名《Go 入门指南》

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .