cnonce Goto Github PK

hackutils

It is a hack tool kit for pentest and web security research.

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

ibos_4.4.3

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

jquery-with-xss

jQuery with XSS, Testing and Secure Version

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsloader

js免杀shellcode，绕过杀毒添加自启

kali-tools-zh

😛kali linux 工具使用（中文机翻版）

kscan

Kscan是一款纯go开发的轻量级的资产发现工具，可针对指定IP段、资产清单、存活网段自动化进行端口扫描以及TCP指纹识别和Banner抓取，在不发送更多的数据包的情况下尽可能的获取端口更多信息。并且能够针对扫描结果进行自动化暴力破解，且是go平台首款开源的RDP暴力破解工具。

langzi_src_safe_cruise

linux-exploit-suggester

Linux privilege escalation auditing tool

mailget

通过脉脉用户猜测企业邮箱

micro8

Gitbook

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

ms17-010-python

MS17-010: Python and Meterpreter

mysql-magic

dump mysql client password from memory

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

passworddic

2011-2019年Top100弱口令密码字典 Top1000密码字典 服务器SSH/VPS密码字典 后台管理密码字典 数据库密码字典

pci

Packet communication investigator

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

pret

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

ptscan

Phantom scanner——An interface friendly and lightweight web assets scanner

pypykatz

Mimikatz implementation in pure Python

qq

rediswritefile

通过 Redis 主从写出无损文件

reduh

Create a TCP circuit through validly formed HTTP requests

reipdog

用 Python 写的一个查询旁站的脚本

rgperson

RGPerson - 随机身份生成脚本