rainclown Goto Github PK

awesome-red-team-operations

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

blackhat-go

As hackers, we put a premium on function over elegance as time is always scarce. When you need to quickly create a solution to a problem, style concerns come secondary.

cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

cloud-frame

code-audit-challenges

Code-Audit-Challenges

crossinject

32 bit process inject shellcode to 32 bit process and 64 bit process

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist

curlshell

reverse shell using curl

cve-2021-3156

PoC for CVE-2021-3156 (sudo heap overflow)

cve-2021-3157

Sudo Baron Samedit Exploit

ddddocr

带带弟弟 通用验证码识别OCR pypi版

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

esd

Enumeration sub domains(枚举子域名)

evilgophish

evilginx2 + gophish

ex-sim-web

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gobypass

Golang免杀生成工具

grocery-shop

Personal project

hack-requests

The hack-requests is an http network library for hackers

hello-world

Just a begin

ios1

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javasecinterview

打造最强的Java安全研究与安全开发面试题库，帮助师傅们找到满意的工作

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

linuxeelvation

Linux Eelvation(持续更新)

memshelldemo

内存马Demo合集 memshell demo for java / php / python

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...