h1d3r Goto Github PK

.netconfigloader

.net config loader

1135-cobaltstrike-toolkit

about CobaltStrike

1panel

🔥 🔥 🔥 现代化、开源的 Linux 服务器运维管理面板。

2018-blackhat-tools-list

2018 BlackHat Tools List

2021_hvv

2021 hw

2022-lpe-uaf

CVE-2022-2588,CVE-2022-2586,CVE-2022-2585

2023hvv

2023 HVV情报速递~

2023hw

关于2023HW的漏洞、poc、技战法等

2023hw-0day-vulnerability-detection

为更好帮助师傅们HW及日常安全巡检期间进行安全自查检测，银遁安全团队编写了最近公开漏洞的检测工具

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

3102

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本，用于节省红队人员工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

3proxy

3proxy - tiny free proxy server

3snake

Tool for extracting information from newly spawned processes

403-fuzz

针对 403 页面的 fuzz 脚本

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

88-autosignmachine

联通挂机任务积分脚本

aazhen-v3.1

自研JavaFX图形化漏洞扫描工具，支持ThinkPHP 2.x RCE，Thinkphp5 5.0.22/5.1.29RCE，ThinkPHP5 5.0.23RCE和ThinkPHP5 SQL注入漏洞和敏感信息泄露漏洞的漏洞检测，以及命令执行的功能。漏洞POC基本适用ThinkPHP全版本漏洞。

abptts

TCP tunneling over HTTP/HTTPS for web application servers

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

acheron

indirect syscalls for AV/EDR evasion in Go assembly

aclight

A script for advanced discovery of Privileged Accounts - includes Shadow Admins

active-directory-pentest-notes

个人域渗透学习笔记

adduserbysamr-bof

Cobalt Strike BOF that Add a user to localgroup by samr

adsearch

A tool to help query AD via the LDAP protocol

advanced-process-injection-workshop

age

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

aggressor-k8

Ladon for Cobalt Strike & Cracked Download,Large Network Penetration Scanner, vulnerability / exploit / detection / MS17010 / password/brute-force/psexec/atexec/sshexec/webshell/smbexec/netcat/osscan/netscan/struts2Poc/weblogicExp

aggressor-powerview

PowerView menu for Cobalt Strike

aggressor-script

Collection of Aggressor Scripts for Cobalt Strike