st0new Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

ad-attack-defense

Active Directory Security For Red & Blue Team

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

bilibilitask_2

BilibiliTask_2

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

douyin_auto

使用python+Airtest 编写的自动刷抖音等短视频脚本

exploits

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

gobypass

Golang免杀生成工具

goshellcodebypassvt

通过线程注入及-race参数免杀全部VT

homework-of-python

Python codes of my blog.

jquery-with-xss

jQuery with XSS, Testing and Secure Version

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce

picker

将你的repo变为讨论社区

poc-in-github

PoC auto collect from GitHub.

poc-proxycommand-vulnerable

Proof of conept to exploit vulnerable proxycommand configurations on ssh clients

python

All Algorithms implemented in Python

rabbitmqbruter

写了一个简单的Rabbit密码爆破

random-img

hexo-theme-Annie的随机图片集

rubeus

Trying to tame the three-headed dog.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securitytesting

shiftleft-java-demo

st0new.github.io

threathunting-book

Threat hunting Web Windows AD linux ATT&CK TTPs

uncompress-

一个uncompress批量解密工具，并将解密后的文件放在新的文件夹下

url_check

多线程URL存活检测

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose