biubiuniu Goto Github PK

2021_hvv

2021 hw

2021hvv_vul

2021hvv漏洞汇总

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

alicloud-tools

阿里云ECS、策略组辅助小工具

awiscan

A fast information gathering tool for pentesters.

awvs_190703137

Docker Awvs

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

behinder

“冰蝎”动态二进制加密网站管理客户端

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦

burpsuiteloader

Burp Suite loader version --> ∞

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cmd.jsp

A super small jsp webshell with file upload capabilities.

cobalt_strike_wiki

Cobalt Strike系列

cve-2017-11882

CVE-2017-11882 exploitation

dazzleup

A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems.

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

exploit-dictionary

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzscanner

一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。

github-monitor

Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)

godofhacker

黑客神器

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

impacket-examples-windows

The great impacket example scripts compiled for Windows

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

lazagne

Credentials recovery project

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

mimikatz

A little tool to play with Windows security

mimipenguin

A tool to dump the login password from the current linux user