o-halfway Goto Github PK

-v1.0

冰蝎v1.0

0xsp-mongoose

Privilege Escalation Enumeration Toolkit (ELF 64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding

7kbscan-rdp-sniper

一款有图形界面的RDP(3389)口令检测工具

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

bolt

CSRF Scanner

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

cve-2019-5418-scanner

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

dirtycow-exp

编译好的脏牛漏洞（CVE-2016-5195）EXP

discuz-ml-rce

discuz ml rce

dnsmaper

子域名枚举与地图标记

dog-tunnel

p2p tunnel,(udp mode work with kcp,https://github.com/skywind3000/kcp)

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exploit-dictionary

hackertarget

🎯 HackerTarget ToolKit - Tools And Network Intelligence To Help Organizations With Attack Surface Discovery 🎯

high-speed-downloader

百度网盘不限速下载 支持Windows和Mac 2018年1月16日更新

htcap

htcap is a web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes.

httpscan

一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

jdsrc-small-classroom

京东SRC小课堂系列文章

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

killshot

Information gathering Tool

leaklooker

Find open databases with Shodan(利用Shodan搜索数据库信息泄露的脚本工具)

linuxcheck

linux信息收集脚本 主要用于应急响应

micro8

Gitbook

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

osmedeus

Fully automated offensive security tool for reconnaissance and vulnerability scanning

php_bug_wiki

代码审计相关的一些知识

redis-rce

Redis 4.x/5.x RCE