srkmggmk Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bestjavaer

这是一个成为更好的Java程序员的系列教程

bypassav

借助Win-PS2EXE项目编写cna脚本方便快速生成免杀可执行文件

clash-for-linux

Linux 端使用 Clash 作为代理工具

etcher

Flash OS images to SD cards & USB drives, safely and easily.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

guide.bash.academy

Bash Academy - The Bash Guide

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

heu_kms_activator

httpscreenshot

hugo-theme-docdock

Declination of @matcornic Learn theme to Hugo

hydra

Hydra is a framework for elegantly configuring complex applications

impacket

Impacket is a collection of Python classes for working with network protocols.

ksubdomain

无状态子域名爆破工具

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

oscp

My OSCP notes

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-cheat-sheets

A collection of snippets of codes and commands to make your life easier!

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

red-baron

Automate creating resilient, disposable, secure and agile infrastructure for Red Teams.

reverse-shell-generator

Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)

rustscan

🤖 The Modern Port Scanner 🤖

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

springcloud-config

thefatrat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software

theharvester

E-mails, subdomains and names Harvester - OSINT