savior325 Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

attck-pentester-book

ATTCK-PenTester-Book

auto-gpt

An experimental open-source attempt to make GPT-4 fully autonomous.

behinder

“冰蝎”动态二进制加密网站管理客户端

behinderclientsource

冰蝎客户端源码-3.0-BETA11.t00ls

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

bo2k

Archive of BO2K_1_1_6 filez + src

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

caesar

一个全新的敏感文件发现工具

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

checkinbox

cloudsecwiki

CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.

cobaltstrike-extraneous-space

Historical list of {Cobalt Strike,NanoHTTPD} servers

common-regex

:jack_o_lantern: 常用正则表达式 - 收集一些在平时项目开发中经常用到的正则表达式。

ctf_scripts

scripts of ctf

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x (x86 and x86_64)

django-defectdojo

DefectDojo is an open-source application vulnerability correlation and security orchestration tool.

empire

Empire is a PowerShell and Python post-exploitation agent.

fancyss

fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

goproxy

Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

insight2

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

javaweb-sec

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

k8cscan

K8Cscan 大型内网渗透自定义扫描器（附C#/VC/Delphi/Python插件Demo源码) 程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆、系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本