xxnbyy Goto Github PK

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

s7scan

a pentest scanner, To make excellent tools / 一个集七种功能的漏洞综合检测利用工具, 希望可以打造出一款优秀的渗透工具

scan-t

a new crawler based on python with more function including Network fingerprint search

scrun

BypassAV ShellCode Loader (Cobaltstrike/Metasploit)

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

security_codes

个人安全开发代码归档：包括但不限于渗透测试，资产收集，大规模漏洞扫描器，网络安全相关资料文档

shadowsocks

shimit

A tool that implements the Golden SAML attack

shiroexploit

Shiro550/Shiro721 一键化利用工具

simpleshellcodeinjector

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.

snetcracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

sploits

srchunter

SRCHunter一款基于python的开源扫描器

ssh-brute-force-scanner

SSH2 Brute Force Scanner 2016 , this ssh brute force is wrote in c , works under any Linux platform 32 bits and 64 .

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfx

CVE-2014-4210+Redis未授权访问

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

sweetpotato

SweetPotato修改版，用于webshell下执行命令 感谢@zcgonvh和@RcoIl两位师傅的耐心指导

sweetpotato-1

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

sylantstrike

Simple EDR implementation to demonstrate bypass

taskscheduler-bypass

TaskScheduler-Bypass

thc-hydra

hydra

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode (NOT Supported)

thinkphp

thinkphp反序列化漏洞复现及POC编写

thinkphpgui

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

tomcat-ajp-exp

Java version of Tomcat-AJP-EXP, for practice

tomcat-weak-password-scanner

醉考拉tomcat后台弱口令扫描器，命令行版+图形界面版。

vulnerability_exp

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain