fengniange Goto Github PK

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

all-in-xrayscan

Xray批量扫描，微信实时推送！

arl-finger-add

灯塔（最新版）指纹添加脚本！

arl-npoc

集漏洞验证和任务运行的一个框架

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

codeqlrule

个人使用CodeQL编写的一些规则

ctf-rsa-tool

a little tool help CTFer solve RSA problem

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

geekdesk

小巧、美观的桌面快速启动工具

govcl

Cross-platform Golang GUI library.

httpcanary

httpcanary安装包

interactsh

An OOB interaction gathering server and client library

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

libveinmind

一个由长亭自研，直观而可扩展的容器安全 SDK

limlauncher--new-

仿Rolan启动器

natpass

🔥居家办公，远程开发神器

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

secexample

JAVA 漏洞靶场 (Vulnerability Environment For Java)

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

shadowsocksr-windows

Ship of Theseus

timetec_cloud_awdms

timetec_cloud_awdms_2

vpsenvinstall

一键部署渗透VPS

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

yarx

An awesome reverse engine for xray poc. | 一个自动化根据 xray poc 生成对应 server 的工具