panda1g1 Goto Github PK

520apkhook

把msf生成的安卓远控附加进普通的app中，并进行加固隐藏特征。可以绕过常见的手机安全管家。

apkinfector

Advanced Android AV Evasion Tool Written In Python 3 that can Embed/Bind meterpreter APK to any Legitimate APK

apksheller

apk一键加固工具(JAVA层加密DEX，防反编译)

awesomexss

Awesome XSS stuff

blogs_bk

PentestNotes

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

botnets

Boatnets

bscan

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

bypassav

Cobalt Strike插件，用于快速生成免杀的可执行文件

cobaltstrikesource

Cobaltstrike4.1 Source

compile_code

实现一个简易的编译器，识别特定的语句，并按照语句执行

crypto-experiments

密码学实验

ctf_web_docker

dockers for CTF_Web.

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

django_blog

基于django的blog，可用来归类、总结知识。

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

go-packer

golang打包二进制进行免杀

godzilla

哥斯拉

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

huan

Encrypted PE Loader Generator

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

manticore

Symbolic execution tool

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

myfuzz

从总多目录字典中合并提取的高效目录爆破字典

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.