pingxcpost Goto Github PK

angelsword

Python3编写的CMS漏洞检测框架

apkleaks

Scanning APK file for URIs, endpoints & secrets.

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-honeypots

an awesome list of honeypot resources

awesome-pentest

:computer:⚔️ A collection of awesome penetration testing resources, tools, and other shiny things.

bug-project-framework

漏洞利用框架模块分享仓库

caldera

Scalable Automated Adversary Emulation Platform

cheatsheets

Cheat sheets for various projects.

cms_poc_exp

cms漏洞插件搜集(一起来搜集)

cobaltsplunk

Splunk Dashboard for CobaltStrike logs

cobaltstrike-toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

cobra

Source Code Security Audit (源代码安全审计)

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

cve-2020-0674

Info about CVE-2020-0674

cve-2020-17382

PoC exploits for CVE-2020-17382

deception-as-detection

Deception based detection techniques mapped to the MITRE’s ATT&CK framework

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

docusaurus

Easy to maintain open source documentation websites.

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

doge-gabh_v

domaintools

内网域渗透小工具

emp3r0r

linux post-exploitation framework made by linux user

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

f-nascan-plus

F-NAScan-PLUS 安服资产搜集

faraday

Collaborative Penetration Test and Vulnerability Management Platform

fiercephish

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

fingerprinthub

侦查守卫(ObserverWard)的指纹库

fish

Fish is a phishing tool that inhabits a collection of webpages. It tries to replicate webpages as closely as possible for a hard to distinguish phishing page.

fox-scan

Fox-scan is a initiative and passive SQL Injection vulnerable Test tools.