archbow Goto Github PK

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

archbow.github.io

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awesome-redteam

一个红队知识仓库

f8x

红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

go-shellcode

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

hackbrowserdata

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

havoc

The Havoc Framework.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

javasec

a rep for documenting my study, may be from 0 to 0.1

jndi-injection-exploit-plus

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

jyso

It can be either a JNDIExploit or a ysoserial.

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

sarasa-mono-sc-nerd

简体中文等距更纱黑体+Nerd图标字体库。中英文宽度完美2:1，图标长宽经过调整，不会出现对齐问题，尤其适合作为终端字体。

shell-analyzer

Java内存马查杀GUI工具，实时动态分析，支持本地和远程查杀

suo5

A high-performance http proxy tunneling tool

web-sec

WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】

ysoserial

ysoserial for su18