kk-hub446 Goto Github PK

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR) 杀毒绕过

msfmania

Python AV Evasion Tools

mythic

A collaborative, multi-platform, red teaming framework

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nextscan

飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。

ngcbot

一个基于✨HOOK机制的微信机器人，支持🌱安全新闻定时推送【FreeBuf，先知，安全客，奇安信攻防社区】，👯后缀名查询，⚡备案查询，⚡手机号归属地查询，⚡WHOIS信息查询，🎉星座查询，⚡天气查询，🌱摸鱼日历⚡微步威胁情报查询， 🐛美女视频，⚡美女图片，👯帮助菜单。📫 支持积分功能，😄自定义程度丰富，小白也可轻松上手！

nginx-1.21.6rce

Nginx 0-day on latest nginx

nginx1.21.5_stack-overflow

1

nginxday

Nginx 18.1 04/09/22 zero-day repo

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

nucleifuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

ola

osmedeus-base

Build your own reconnaissance system with Osmedeus Next Generation

osmedeus-workflow

Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own

paramspider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest-tools

内网渗透工具

pentestgpt

A GPT-empowered penetration testing tool

ph-recon

This script will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in background and then analyze the target manually.

pip-audit

Audits Python environments and dependency trees for known vulnerabilities

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

pocassist

全新的漏洞测试框架，支持poc在线编辑、运行、批量测试。使用文档：

post-hub

Webshell、C2、免杀、提权、代理、横向、域渗透

prismx

棱镜 X · 集渗透前置、后置于一体的轻量型跨平台系统

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

pwncat

Fancy reverse and bind shell handler

pxplan

CVE-2022-2022