barbecuepizza Goto Github PK

empire2.0

Empire is a PowerShell and Python post-exploitation agent.

erfrp

frp的修改版-去除特征流量免杀信息隐藏

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

hack-er-tools

emergency response toolkit

hacking-books

havoc

The Havoc Framework.

hello-world

first use GitHub,please teach me more

homework

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

invoke-obfuscation-bypass

Invoke-Obfuscation-Bypass + PS2EXE 过主流杀软

java-shellcode-loader

基于Java实现的Shellcode加载器

javacode

mmallearing

javaguide

「Java学习+面试指南」一份涵盖大部分 Java 程序员所需要掌握的核心知识。准备 Java 面试，首选 JavaGuide！

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

malwarelab_vm-setup

Setup scripts for my Malware Analysis VMs

mdut

MDUT - Multiple Database Utilization Tools

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

mimikatz

A little tool to play with Windows security

misterch0c-shadowbroker

msmap-

Msmap is a Memory WebShell Generator.

mypython

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

p4wnp1

P4wnP1 is a highly customizable USB attack platform, based on a low cost Raspberry Pi Zero or Raspberry Pi Zero W.

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms