leexuan Goto Github PK

library-poc

基于Pocsuite3、goby编写的漏洞poc&exp存档

lme

Logging Made Easy

lockbit-black-builder

勒索样本

logstash-input-file

logstash-patterns-core

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malware-ioc

Indicators of Compromises (IOC) of our various investigations

markdown-syntax-zhtw

Markdown 語法說明中文版

marshalsec

mdpocs

猫蛋儿安全团队编写的poc能报就能打。企业微信、海康、Metabase、Openfire、泛微OA......

menoygone

Attack cobalt strike server’s FCS by DoW

mining-inspection-ver2.0

本地挖矿检测工具 Ver2.0，BUG比较多，欢迎各路大神帮忙修BUG

monkey

Infection Monkey - An automated pentest tool

moss

An open-source tool-augmented conversational language model from Fudan University

msticpy

Microsoft Threat Intelligence Security Tools

multi-level.bayesian.network

mysqlist

Mysql Server端伪造-任意文件读取-CTF快速利用脚本

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nebula

"星云"业务风控系统，主工程

netview

【内网渗透】Netview enumerates systems using WinAPI calls

nishang

【内网渗透】Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

ofx

漏洞批量验证框架

olist213_information_security_books

150本信息安全方面的书籍书籍（持续更新）

oneforall

OneForAll是一款功能强大的子域收集工具

osquery

SQL powered operating system instrumentation, monitoring, and analytics.

osquery-attck

Mapping the MITRE ATT&CK Matrix with Osquery

ossec-rules

A repository for OSSEC rules and decoders

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF