ydxred Goto Github PK

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

cve-2018-8120

CVE-2018-8120 Windows LPE exploit

dzzoffice

dzzoffice

electronic-wechat

:speech_balloon: A better WeChat on macOS and Linux. Built with Electron by Zhongyi Tong.

everydaywechat

微信助手：1.每日定时给好友发送定制消息。2.自动回复好友。

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

front-end-tutorial

:panda_face: 最全的资源教程-前端涉及的所有知识体系，并在 Nice Front-end Tutorial 持续更新；

gamewxqrlogin

安卓微信游戏扫码登录，支持王者荣耀等微信扫码登录

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

hackinglibrary

‪APT,‬ ‪Cyber warfare,‬ ‪Penetration testing,‬ ‪Zero-day,Exploiting,‬Fuzzing,Privilege-Escalation,browser-security‪,Spyware,Malwres evade anti-virus detection,‬ ‪Rookit CYPTER,‬ ‪Antiviruses Bypassing-av,‬ social engineering,WORMS,Sandbox-Escape,‬ ‪Memory-injection,‬ ‪Ethical,Gray,White,RedTeam,Bugbounty,bug hunter,Cheat Sheet‬...

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

maizimianfei

麦子学院课程免费下载

micro8

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

ms15-034

POC MS15-034

nagascan

一款分布式被动代理式扫描器

nginxintroductiontopractice

Nginx入门到实践 不管是运维还是开发 Nginx都是你的必备技能

onlinetools

在线cms识别|旁站|c段|信息泄露|工控|系统|物联网安全|cms漏洞扫描|端口扫描|待续..

openstar

lua waf,nginx+lua,openresty,luajit,waf+,cdn,nginx

pentest-tools

内网渗透工具

publicmonitors

对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

python-tools

Some tools written using python script

redis-rogue-server

Redis(<=5.0.5) RCE

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

src-experience

工欲善其事，必先利其器

srchunter

SRCHunter一款基于python的开源扫描器

vulnerability-list

在渗透测试中快速检测常见中间件、组件的高危漏洞。

vulscan

vulscan 扫描系统