wsfengfan Goto Github PK

jenkins

Jenkins漏洞探测、用户抓取爆破

jmxbf

A brute force program to test weak accounts configured to access a JMX Registry

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

laravel

A PHP framework for web artisans

local-exploits

Various local exploits

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

memshell

a webshell resides in the memory of java web server

micro8

modernwebprograming

Web programing

ms17-010-eternalblue-winxp-win10

EternalBlue Metasploit Port to various Windows Versions from Windows XP SP2 up to Windows 10 Pro

muma

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nw-tips

win内网_域控安全

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

pentest-tools

内网渗透工具

pentest_study

从零开始内网渗透学习

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

ps1encode

Script used to generate and encode a PowerShell based Metasploit payloads.

pykerbrute

Use python to perform Kerberos pre-auth bruteforcing

python-hacker

python编写的黑客渗透工具代码，可供于学习和使用

python-machine-learn

python编写机器学习代码

qqlocation

rcescanner

Simple python script to extract unsafe functions from php projects

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

resources-for-learning-ethical-hacking

🔗 All the resources I could find for learning Ethical Hacking and Penetration Testing.