haiandaxia Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

365-stealer

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

90daysofcybersecurity

This repository contains a 90-day cybersecurity study plan, along with resources and materials for learning various cybersecurity concepts and technologies. The plan is organized into daily tasks, covering topics such as Network+, Security+, Linux, Python, Traffic Analysis, Git, ELK, AWS, Azure, and Hacking. The repository also includes a `LEARN.md

above

Invisible network protocol sniffer

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

ad_enumeration_hunt

adaclscanner

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

adcskiller

An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer

adcsync

Use ESC1 to perform a makeshift DCSync and dump hashes

admin-scanner

This tool is design to find admin panel of any website by using custom wordlist or default wordlist easily and allow you to find admin panel trough a proxy server

administrative-divisions-of-china

中华人民共和国行政区划：省级（省份）、 地级（城市）、 县级（区县）、 乡级（乡镇街道）、 村级（村委会居委会） ，**省市区镇村二级三级四级五级联动地址数据。

admodule

Microsoft signed ActiveDirectory PowerShell module

adokit

Azure DevOps Services Attack Toolkit

ai-vtuber-kun

AI Vtuber Kun是一个由OpenAI驱动的虚拟主播，可以在Bilibili直播中与观众实时互动。它使用自然语言处理和文本转语音技术生成对观众问题的回答。

aicef

aker

SSH bastion/jump host/jumpserver

any2api

A framework( or a tool? ) that turns any website into an API

api-vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

auto-elevate

Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token Impersonation

autobloody

Tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound

av_evasion_tool

掩日 - 免杀执行器生成工具

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-chatgpt-prompts-zh

ChatGPT 中文调教指南。各种场景使用指南。学习怎么让它听你的话。

awesome-hacking-tools

收集网上好用、实用的红蓝对抗武器。从资产扫描、泄漏扫描、信息收集、漏洞扫描、SRC批量挖掘、内网渗透、应急响应等等工具。 大部分我都用过、部分会写上自己的感想与建议，希望对你有帮助

awesome-llms-in-china

**大模型

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.