kosakd Goto Github PK

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nyancat

Nyancat in your terminal, rendered through ANSI escape sequences. This is the source for the Debian package `nyancat`.

office-exploits

office-exploits Office漏洞集合 https://www.sec-wiki.com

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pigsyscall

An implementation of an indirect system call

poc-collection

poc-collection 是对 github 上公开的 PoC 进行收集的一个项目。

poc-cve-2021-30632

PoC CVE-2021-30632 - Out of bounds write in V8

pocassist

pocassist是一款全新的开源漏洞测试框架，无需代码知识也可实现对poc的在线编辑、管理、测试。 使用之前请先阅读文档。

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

post-hub

内网渗透：C2、免杀、代理、横向

proxy-attackchain

proxylogon & proxyshell & proxyoracle & proxytoken & all exchange server vulns summarization :)

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

redis-cve-2022-0543

Redis沙盒逃逸漏洞复现(CVE-2022-0543)

reptile

LKM Linux rootkit

rootkits-list-download

This is the list of all rootkits found so far on github and other sites.

rotateproxy

利用fofa搜索socks5开放代理进行代理池轮切的工具

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

scarecrow_wrapper

scf-proxy

云函数代理服务

security-guard

安全卫士r3工具集

security-ppt

Security-related Slide Presentation（大安全各领域各公司各会议分享的PPT）

security_articles

爬取安全领域文章(Seebug、先知社区、安全客、freebuf等)，转成pdf存到本地，离线学习

sharprdp

Remote Desktop Protocol .NET Console Application for Authenticated Command Execution

sharpxdecrypt

Xshell全版本密码恢复工具

shellcode-factory

shellcode 生成框架

shellcode-loader

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

spring-rce-war

t00ls

T00LS文章更新提醒，自动签到，域名查询