hdys0vn Goto Github PK

fofa

Fofa网络测绘命令汇总（长期更新～）

framevul

POC集合，框架nday漏洞利用

frchannel

帆软bi反序列化漏洞利用工具

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fscandc

fscan结果优化，更新DC域筛选

fscansnipaste

FscanSnipaste_1.8.2_001_内网快速连接工具

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzingtool

Software for fuzzing, used on web application pentestings.

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

gatherburp

一款burp插件,请看简介

gcr-google-calendar-rat

Google Calendar RAT is a PoC of Command&Control over Google Calendar Events

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

gitlab-version-nse

Nmap script to guess* a GitLab version.

giuda

Ask a TGS on behalf of another user without password

go-secdump

Tool to remotely dump secrets from the Windows registry

goad

game of active directory

goby

godpotato

godpotato-aggressor-script

godzilla-suo5memshell

使用 Godzilla 一键注入 Suo5 内存马

gogo

面向红队的, 高度可控可拓展的自动化引擎

gowapt

Go Web Application Penetration Test

gpoddity

The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).

graphstrike

Cobalt Strike HTTPS beaconing over Microsoft Graph API

gssapi-abuse

A tool for enumerating potential hosts that are open to GSSAPI abuse within Active Directory networks

hac_bored_writing

各种漏洞批量扫描poc、exp，涵盖未授权、RCE、文件上传、sql注入、信息泄露等

hackerone-reports

Top disclosed reports from HackerOne

hadesldr

Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2