t1gress Goto Github PK

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2022-hw-poc

2022 护网行动 POC 整理

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

androidkiller

AndroidKiller v1.3.1

apktool

A tool for reverse engineering Android apk files

auxtools

渗透辅助工具

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-hacking

awesome hacking chinese version

awesome-poc

一个各类漏洞POC知识库

cheng1107

Config files for my GitHub profile.

cloudtools

云资产管理工具 目前工具定位是云安全相关工具，目前是两个模块 云存储工具、云服务工具， 云存储工具主要是针对oss存储、查看、删除、上传、下载、预览等等 云服务工具主要是针对rds、服务器的管理，查看、执行命令、接管等等

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dogcs4.4

cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

electron_shell

Developing a more covert Remote Access Trojan (RAT) tool by leveraging Electron's features for command injection and combining it with remote control methods.

farmsec

fastjson

Fastjson姿势技巧集合

learngolang

《Golang学习资源大全-只有Go语言才能改变世界》Only Golang Can Change The World.

linuxtq

《Linux提权工具与方法论》

note-1

笔记

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

passworddic

渗透测试常用密码字典合集(持续更新)

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentesting-active-directory-cn

域渗透脑图中文翻译版

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pinduoduo_backdoor_unpacker

Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

powershell-bypass

powershell命令免杀的小工具，可过Defender、360等，可执行上线cobaltstrike、添加计划任务等。 A powershell loader bypass anti-virus

qa-interview

软件测试工程师面试的一些知识点。

secbook

信息安全从业者书单推荐