foreverluck Goto Github PK

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

php-webshell-bypass-waf

分享PHP WebShell 绕过WAF 的一些经验 Share some experience about PHP WebShell bypass WAF and Anti-AV

poshc2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

railgun

redeye

RedEye is a visual analytic tool supporting Red & Blue Team operations

redsocks

transparent TCP-to-proxy redirector

ruler

A tool to abuse Exchange services

searpy

🥀 Search Engine Tookit，URL采集、Favicon哈希值查找真实IP、子域名查找

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

shadowsocksx-ng

Next Generation of ShadowsocksX

sn1per

Attack Surface Management Platform

sprayhound

Password spraying tool and Bloodhound integration

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

subdomainsbrute

A fast sub domain brute tool for pentesters

sublist3r

Fast subdomains enumeration tool for penetration testers

terminator

Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes

test

theharvester

E-mails, subdomains and names Harvester - OSINT

tools

webshell

This is a webshell open source project

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

wmiexec-pro

New generation of wmiexec.py

wydomain

to discover subdomains of your target domain

youdaonote-pull

📝 一个一键导出 / 备份「有道云笔记」所有笔记的 Python 脚本。 A Python script to export/backup all the notes of the "Youdao Note".