sec-fork Goto Github PK
Name: 无情的 Fork 机器
Type: Organization
Bio: 这是一个备份用Fork账号
Name: 无情的 Fork 机器
Type: Organization
Bio: 这是一个备份用Fork账号
Sandman is a NTP based backdoor for red team engagements in hardened networks.
渗透测试报告自动生成工具!
scalpel是一款命令行扫描器,支持深度参数注入,拥有一个强大的数据解析和变异算法,可以将常见的数据格式(json, xml, form等)解析为树结构,然后根据poc中的规则,对树进行变异,包括对叶子节点和树结构 的变异。变异完成之后,将树结构还原为原始的数据格式。 原理:https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog
基于优化后的vscan,继续走更多集成、自动化功能
ScareCrow - Payload creation framework designed around EDR bypass.
ScareCrow - Payload creation framework designed around EDR bypass.
A little proxy tool based on Tencent Cloud Function Service.
免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus
创建隐藏计划任务,权限维持
CS shellcode 加载器
An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memory.
🥀 Search Engine Tookit,URL采集、Favicon哈希值查找真实IP、子域名查找
Simple, small, C++ embeddable webserver with WebSockets support
专注登入框暴力破解,selenium+chromedriver模拟浏览器点击登入,无视复杂的前端JS加密,弱口令多线程快速检测。
利用正则对不同的目标进行匹配,URL,js,遍历文件夹文件
越权检测工具
A list for Web Security and Code Audit
一个既可以满足安服仔日常渗透工作也可以批量刷洞的工具盒子。集合了常见的域名收集、目录扫描、ip扫描、指纹扫描、PoC验证等常用工具,方便安服仔快速展开渗透测试
致远OA漏洞检测
基于长链接和代码注入的Android private API暴露框架
以http、ldap以及socket形式批量监听端口,打印端口连接日志
An extension to use Semgrep inside Burp Suite.
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
无影脚 - 命令行下的日志文件处理工具
Alternative Shellcode Execution Via Callbacks Rewrite In C#
Command and Control Framework written in C#
Simple PoC demonstrating syscall execution in C#
Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.
对密码已保存在 Windwos 系统上的部分程序进行解析,包括:Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品(Xshell,Xftp)。源码:https://github.com/RowTeam/SharpDecryptPwd
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.