k0njac Goto Github PK

-

2021_hvv

2021 hw

aceldr

Cobalt Strike UDRL for memory scanner evasion.

allin

A flexible scanner

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

arthindir

华莱士喷射目录扫描

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

caesar

一个全新的敏感文件发现工具

crackminapp

(反编译微信小程序)一键获取微信小程序源码(傻瓜式操作), 使用了C#加nodejs制作

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

goahead

GoAhead Enterprise Edition Web Server

gslibrary

轻量级知识库&POC管理平台

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

http-script-generator

ZAP/Burp plugin that generate script to reproduce a specific HTTP request (Intended for fuzzing or scripted attacks)

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

A malicious LDAP server for JNDI injection attacks

jndiexploit-1

from https://github.com/feihong-cs/JNDIExploit

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

ruoyi-all

若依后台定时任务一键利用

seeyon_exp

致远OA综合利用工具

sharpdbeaver

DBeaver数据库密码解密工具

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

sshbrute

ssh轮询爆破小轮子

stealerium

Stealer + Clipper + Keylogger

superwordlist

基于实战沉淀下的各种弱口令字典

ultimaste-nuclei-templates

极致攻防实验室 nuclei 检测 POC

verifyemail

Python在线验证邮箱真实性，支持批量验证

vulnerability-recurrence