go-bi Goto Github PK

gh0st

a open source rat from china

git-tips

:trollface:Git的奇技淫巧

gitlab-cve-2021-22205

gitlab-exiftool-rce

RCE Exploit for Gitlab < 13.10.3

gitlab-wiki-rce

RCE Exploit for Gitlab < 13.9.4

go-bi-soft

go-tomcat-mgmt-scanner

A simple scanner to find and brute force tomcat manager logins

goby_poc

googleauthenticator

Burp Suite plugin that dynamically generates Google 2FA codes for use in session handling rules (approved by PortSwigger for inclusion in their official BApp Store).

gost

GO Simple Tunnel - a simple tunnel written in golang

grafanaexp

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic.

gyscan

l1ubai/SpringActuator-Unauthorized-Scan

hack-fastjson-1.2.80

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hae

HaE - BurpSuite Highlighter and Extractor

hardhatc2

A C# Command & Control framework

hashcat

havoc

The Havoc Framework

havoc-docker

Docker for Havoc C2

heapdump_tool

heapdump敏感信息查询工具，例如查找 spring heapdump中的密码明文，AK,SK等

heimdallr

一款完全被动监听的谷歌插件，用于高危指纹识别、蜜罐特征告警和拦截、机器特征对抗

heroinn

A cross platform C2/post-exploitation framework.

hexdnsechot

命令执行不回显但DNS协议出网的命令回显场景解决方案（修改为使用ceye接收请求，添加自定义DNS服务器）

hexyrunner

Takes raw hex shellcode (e.g. msfvenom hex format) from a cmd line arg, text file, or URL download and runs it.

hook-passwordchangenotify

Stealing passwords every time they change

host_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

httpheadmodifer

一款快速修改HTTP数据包头的Burp Suite插件

httpscan.go

httpscan implements by Go

icmp-backdoor

Backdoor that listens for specially crafted ICMP packets and spawns reverse shells.

iconhash

fofa shodan favicon.ico hash icon ico 计算器