lowliness9 Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

ad-penetration-testing-tools

域渗透工具

aggressor

Cobalt Strike 插件收集

aliyun-accesskey-tools

阿里云accesskey利用工具

antsword-loader

AntSword 加载器

antswordencoder

AntSword Encoder byPassWaf

awesomeencoder

AntSword 自定义编(解)码器分享

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bbscan

A fast vulnerability scanner

behinder

“冰蝎”动态二进制加密网站管理客户端

bug-project-framework

漏洞利用框架模块分享仓库

bugsku

Collect common vulnerabilities

burp-non-http-extension

Non-HTTP Protocol Extension (NoPE) Proxy and DNS for Burp Suite.

bypassantivirus

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

bypassav

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

chunked-coding-converter

Burp suite 分块传输辅助插件

coremail-poc

coremail 配置信息泄漏

crack

爆破工具,支持 ftp ssh smb mysql mssql postgres

crossc2

generate CobaltStrike's cross-platform payload

cve-2019-2725

weblogic绕过和wls远程执行

dbscanner

自动扫描内网常见sql、no-sql数据库脚本(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)，包含未授权访问及常规弱口令检测

discovertarget

前渗透信息探测工具集-URL采集

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dockerscan

Docker security analysis & hacking tools

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

empire

Empire is a PowerShell and Python post-exploitation agent.

foureye

AV Evasion Tool For Red Team Ops

framescan-gui

FrameScan-GUI 一款python3和Pyqt编写的具有图形化界面的cms漏洞检测框架。

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.