idnu11 Goto Github PK

kt

Kernel file/process/object tool

log4j2-cve-2021-44228

Remote Code Injection In Log4j

luwu

红队基础设施自动化部署工具

mec

for mass exploiting

micro8

Gitbook

mimikittenz

A post-exploitation powershell tool for extracting juicy info from memory.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesting-bible

This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.

phishlulz

poc-collection

poc-collection 是对 github 上公开的 PoC 进行收集的一个项目。

process-injection

汇总了目前可以找到的所有的进程注入的方式，完成了x86/x64下的测试，不断更新中

ratdecoders

Python Decoders for Common Remote Access Trojans

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

redteamer

红方人员作战执行手册

remote_shellcodeloader

远程shellcode加载&权限维持+小功能

satansword

红队综合渗透框架

sdokeycrypt-sys-local-privilege-elevation

CVE-2019-9729. Transferred from https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation

sharpxdecrypt

Xshell全版本密码恢复工具

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

suanve.github.io

sunflower_get_password

一款针对向日葵的识别码和验证码提取工具

taroco-authentication

Taroco-Authentication 统一认证服务

tomcat-webshell

Tomcat-内存马-Webshell

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

wechat_articles_spider

微信公众号文章的爬虫