sec-fork Goto Github PK
Name: 无情的 Fork 机器
Type: Organization
Bio: 这是一个备份用Fork账号
Name: 无情的 Fork 机器
Type: Organization
Bio: 这是一个备份用Fork账号
Security testing tools for Windows sandboxing technologies
渗透测试报告自动生成工具!
scalpel是一款命令行扫描器,支持深度参数注入,拥有一个强大的数据解析和变异算法,可以将常见的数据格式(json, xml, form等)解析为树结构,然后根据poc中的规则,对树进行变异,包括对叶子节点和树结构 的变异。变异完成之后,将树结构还原为原始的数据格式。 原理:https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog
基于优化后的vscan,继续走更多集成、自动化功能
A little proxy tool based on Tencent Cloud Function Service.
免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus
CS shellcode 加载器
An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.
🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找
专注登入框暴力破解,selenium+chromedriver模拟浏览器点击登入,无视复杂的前端JS加密,弱口令多线程快速检测。
利用正则对不同的目标进行匹配,URL,js,遍历文件夹文件
越权检测工具
一个既可以满足安服仔日常渗透工作也可以批量刷洞的工具盒子。集合了常见的域名收集、目录扫描、ip扫描、指纹扫描、PoC验证等常用工具,方便安服仔快速展开渗透测试
致远OA漏洞检测
基于长链接和代码注入的Android private API暴露框架
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
无影脚 - 命令行下的日志文件处理工具
Simple PoC demonstrating syscall execution in C#
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。源码:https://github.com/RowTeam/SharpDecryptPwd
SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.
Local privilege escalation from SeImpersonatePrivilege using EfsRpc.
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol
SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
在域控或远程提取登录日志,快速获取域用户对应的IP地址
(批量化改造)sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。
Xshell全版本密码恢复工具
内存加载shellcode绕过waf
使用纯C/C++编写的ShellCode生成框架
该项目为Shellocde加载器,详细介绍了我们如何绕过防病毒软件,以及该工具如何使用
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.