richard6666 Goto Github PK

pentest_questions

渗透测试面试题目

pentest_study

从零开始内网渗透学习

phonesploit-pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

php-audit-labs

一个关于PHP的代码审计项目

php-backdoor

A standalone PHP backdoor for use on *nix and Windows systems.

php-fpm-httpoxy-poc

A PoC for exploiting Guzzle's HTTP_PROXY untrusted read

php_bugs

PHP代码审计分段讲解

pikachu

一个好玩的Web安全-漏洞测试平台

poc

PoC of CVE/Exploit

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

poc-project

poc-t

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

pochubs

PocHubs是为了整合网上知名开源框架的漏洞详细和POC

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193

pocscan

postern-stuff

Postern binaries & documents & configurations

powerscanner

面向HW的红队半自动扫描器

proxypool

自动抓取tg频道、订阅地址、公开互联网上的ss、ssr、vmess、trojan节点信息，聚合去重后提供节点列表，每15分钟更新

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

qingscan

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

railgun

rdpscan

A quick scanner for the CVE-2019-0708 "BlueKeep" vulnerability.

redis

Redis is an in-memory database that persists on disk. The data model is key-value, but many different kind of values are supported: Strings, Lists, Sets, Sorted Sets, Hashes

redisclient

Java Redis Client GUI Tool

redisdesktopmanager

:wrench: Cross-platform GUI management tool for Redis

redteam-bcs

BCS（北京网络安全大会）2019 红队行动会议重点内容

redteam-notebook

Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.