rakjong Goto Github PK

nw-tips

win内网_域控安全

paramfuzzer

一款高效的参数fuzz工具|A faster param fuzzing test tool

pentest-tools

Intranet penetration tools

pentest_note

渗透测试常规操作记录

pex64-injector

Inject your x64 bit executable to any process, masking it as a legitimate process for Anti-Virus evasion.

poc-bomber

利用大量高威胁漏洞poc快速获取目标权限

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

rattler

Automated DLL Enumerator

red_team_tool_countermeasures

redi

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

redsharp

Penetration Test / Read Team - C# tools repository

redteam-tips

关于红队方面的学习资料

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

redteaming2020

RedTeaming知识星球2020年安全知识汇总

safety-project-collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

sb-actuator

Spring Boot Actuator未授权访问【XXE、RCE】单/多目标检测

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

securitytips

seeyon-unauthorized-upload-getshell

致远OA未授权文件上传漏洞批量getshell

sharpblock

A method of bypassing EDR's active projection DLL's by preventing entry point exection

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpgettitle

SharpGetTitle - 基于 C# 的多线程 Web Title 扫描器

sharpsecdump

.Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py

shellcode-to-dll

shellcode 异或加密并生成dll

shellcodeloader

shellcodeloader

shellcodewrapper

Shellcode wrapper with encryption for multiple target languages

sheller

一键加壳/脱壳，混淆，花指令，反调试等

simple-loader

Windows Defender ShellCode Execution Bypass

simpleshellcodeinjector

SimpleShellcodeInjector receives as an argument a shellcode in hex and executes it. It DOES NOT inject the shellcode in a third party application.