zzhsec Goto Github PK

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持log4j漏洞专项，支持联动xray、burp、w13scan等被动批量

b-xssrf

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

backstab

A tool to kill antimalware protected processes

badpotato

Windows 权限提升 BadPotato

bane

this is a python module that contains functions and classes which are used to test the security of web/network applications. it's coded on pure python and it's very intelligent tool ! It can easily detect: XSS (relected/stored), RCE (Remote Code/Command Execution), SSTI, SSRF, CORS Misconfigurations, File Upload, CSRF, Path Traversal,.... Also, it have DDoS capabilities, and variety of information gathering tools packed inside ! Aside of many other useful functionalities.

banli

Banli是一款简单好用的高危资产和高危漏洞扫描工具！

baselinecheck_cdf

Security check of system baseline.服务器基线检查工具。基于python3造的对linux、windows服务器做基线核查的轮子。

basicwindowskernelprogramming

Basic Windows Kernel Programming

batchguard

Batch file AV evasion and obfuscation solution

bbs-go

基于Golang的开源社区系统。

be-a-hacker

roadmap for being a self-taught hacker

beacon_health_check

This aggressor script uses a beacon's note field to indicate the health status of a beacon.

beatrev

POC for frustrating/defeating Malware Analysts

beescan-web

网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC

beginners-guide-to-obfuscation

bifang

自动化生成loader，实现加密、混淆、bypass沙箱、多种现有进程注入技术，动态编译生成。

binary-security-advanced-references

二进制安全高级参考资料

bitb

Browser In The Browser (BITB) Templates

blackjack-dicts

参考十余个项目整理的目录和文件字典

blankspace

Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)

blaster

blaster 是一款弱密码隐患检测工具，用于网站登录弱密码检测。

blasting

blen

漏洞批量验证框架

blockchain-dark-forest-selfguard-handbook

Blockchain dark forest selfguard handbook. Master these, master the security of your cryptocurrency.

blog

Welcome to my blog

bluetooth-cve

常用蓝牙漏洞CVE poc、EXP

bof_collection

Various Cobalt Strike BOFs

bokuloader

Cobalt Strike User-Defined Reflective Loader written in Assembly & C for advanced evasion capabilities. By: @0xBoku & @s4ntiago_p

bottleneckosmosis

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

bountyhunterinchina

重生之我是赏金猎人系列，分享自己和团队在SRC、项目实战漏洞测试过程中的有趣案例