woaiqiukui Goto Github PK

gihubsnk

gihubSNK

googlesearch

This is an updated version to suite Python 3.x execution environments

hackbar_cracked

破解版hackbar

homework-of-powershell

powershell codes of my blog.

homework-of-python

Python codes of my blog.

js-tap

JavaScript payload and supporting software to be used as XSS payload or post exploitation implant to monitor users as they use the targeted application.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

kerberoast

lc

LC（List Cloud）是一个多云攻击面资产梳理工具

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

linbing

本系统是对目标进行漏洞扫描的一个系统,前端采用vue技术,后端采用flask.核心原理是扫描主机的开放端口情况,然后根据端口情况逐个去进行poc检测,poc有110多个,包含绝大部分的中间件漏洞,本系统的poc皆来源于网络或在此基础上进行修改,在centons7环境下使用nginx和uwsgi部署,部署起来可能有点麻烦,烦请多点耐心

linux-exploit-suggester

Linux privilege escalation auditing tool

lldap_plugin_poc

Proof of concept for a Lua plugin system for LLDAP

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

mimikatz

A little tool to play with Windows security

nacosrce

netuser

使用windows api添加用户，可用于net无法使用时.分为nim版，c++版本，RDI版，BOF版。

nginx_shell

nginx WebShell/内存马，更优雅的nignx backdoor

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

observerward

侦查守卫(ObserverWard)指纹识别工具Community web fingerprint identification tool

poc

portscan

通过socket实现简单的端口扫描，如果扫描到21和3306端口则进行简单的字典爆破弱口令

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) remote administration and post-exploitation tool mainly written in python

qax_vpn_crack

奇安信VPN任意用户密码重置

redteamtools

记录自己编写、修改的部分工具

regsvr32

rust-minidump

Type definitions, parsing, and analysis for the minidump file format.

sam-the-admin-maq

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user; Adding the sam_the_admin_maq when MachineAccountQuota=0

samr_resetpassword

SAMR修改域内主机密码