leezp Goto Github PK

androrat

Remote Administration Tool for Android devices

apt_digital_weapon

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

attck-pentester-book

ATTCK-PenTester-Book

behinder

behinder 4.0 tools.jar

behinderclientsource

冰蝎客户端源码-3.0-BETA10

blog

books

bypassantivirus

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cf

Cloud Exploitation Framework 云环境利用框架，方便红队人员在获得 AK 的后续工作

cloudsploit

Cloud Security Posture Management (CSPM)

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrike_4.3_source

Cobaltstrike4.3源码

crawlergo

A powerful dynamic crawler for web vulnerability scanners

cve-2017-1000117

dcept

A tool for deploying and detecting use of Active Directory honeytokens

dnslog

a dnslog platform with tornado, less code.

dnslog-go

DNSLog-GO 是一款golang编写的监控 DNS 解析记录的工具，自带WEB界面

ehoney

e签宝安全团队积累十几年的安全经验，都将对外逐步开放，首开的Ehoney欺骗防御系统，该系统是基于云原生的欺骗防御系统，也是业界唯一开源的对标商业系统的产品，欺骗防御系统通过部署高交互高仿真蜜罐及流量代理转发，再结合自研密签及诱饵，将攻击者攻击引导到蜜罐中达到扰乱引导以及延迟攻击的效果，可以很大程度上保护业务的安全。护网必备良药

fake-flash.cn

www.flash.cn 的钓鱼页，中文+英文

fastjson-blacklist

fastjson-rce-exploit

exploit for fastjson remote code execution vulnerability

fofaloved

fofa普通会员 5000条数据download script && 高级会员导入数据库 script

fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

goja

ECMAScript/JavaScript engine in pure Go

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

hfish

Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段

hvvexploitapply

遵守规章制度关闭项目-使用JAVAFX图形化界面检测对HVV中常见的重点CMS系统和OA系统的已公开的漏洞进行验证。

impacket

Impacket is a collection of Python classes for working with network protocols.

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容