delsadan Goto Github PK

7kbscan-rdp-sniper

一款有图形界面的RDP(3389)口令检测工具

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

badusb-code

收集badusb的一些利用方式及代码

bug-project-framework

漏洞利用框架模块分享仓库

cnvd-2020-10487-bulk-verification

CNVD-2020-10487 OR CVE-2020-1938 批量验证脚本，批量验证，并自动截图，方便提交及复核

cve-2019-2618

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

cve-2019-2725

CVE-2019-2725 命令回显

cve-2019-2726

weblogic绕过和wls远程执行

danger

dn2.io

[ Domain Name to I/O ] Development DNS & Security Data Transportation & Pentesting with SCA and Steganography.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

john

John the Ripper 1.8.0.13-jumbo-1-bleeding-0abfc74 2018-05-15 08:39:32

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

langzi_src_safe_cruise

LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。

linux-exploit-suggester

Linux privilege escalation auditing tool

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mona

Corelan Repository for mona.py

pentest-notes

python-100-days

Python - 100天从新手到大师

receivemsg

receive msg by sim800c

redismodules-executecommand

Tools, utilities and scripts to help you write redis modules!

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_circle

tongdaoa-upload-poc

urltrick