heyzm Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2023hvv

2023 HVV情报速递~

520apkhook

把msf生成的安卓远控附加进普通的app中，并进行加固隐藏特征。可以绕过常见的手机安全管家。

aggressiveproxy

Project to enumerate proxy configurations and generate shellcode from CobaltStrike

ajpy

antihoneypot-chrome-simple

Chrome 蜜罐检测插件

apache-solr-rce

Apache Solr Exploits 🌟

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apikit

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

artifacts-kit

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

ashxlessspy

ashx China Chopper WebShell

asteroid

CTF AWD 实时 3D 攻击大屏

av_evasion_tool

掩日 - 免杀执行器生成工具

awesome-java-security

Java安全☞代码审计/漏洞分析/武器化

aws_security_tools

Scripts and tools for AWS Pentest

badusb-x

The BadUSB Code From FrostsaberX

beaconeye

Hunts out CobaltStrike beacons and logs operator command output

behinder_source

冰蝎的源码（Decompile & Fixed）

blasting_dictionary

爆破字典

bloodhound

Six Degrees of Domain Admin

blueshell

红蓝对抗跨平台远控工具

bscan

bt_panel_privilege_escalation

宝塔面板Windows版提权方法

build-web-application-with-golang

A golang ebook intro how to build a web with golang

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

bypass

bypass-ssl-pinning

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。