starscow Goto Github PK

bloodhound

Six Degrees of Domain Admin

cobaltstrike_cna

使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

docker_image_pusher

使用Github Action将DockerHub镜像转存到阿里云私有仓库，供国内服务器使用，免费易用

dumpall

一款信息泄漏利用工具，适用于.git/.svn源代码泄漏和.DS_Store泄漏

examples-of-web-crawlers

一些非常有趣的python爬虫例子,对新手比较友好,主要爬取淘宝、天猫、微信、豆瓣、QQ等网站。(Some interesting examples of python crawlers that are friendly to beginners. )

filemonitor

文件变化实时监控工具(代码审计/黑盒/白盒审计辅助工具)

fofa_search

利用fofa api搜索host、ip、domain、port、title的一款工具

fofapoc

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

glan-nucleifinger

Nuclei指纹集合（自用）

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

jrand-github

Config files for my GitHub profile.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nomore403

Tool to bypass 403/40X response codes.

observerward

侦查守卫(ObserverWard)指纹识别工具Community web fingerprint identification tool

poc_exp

暂停更新·······正在谋划······

scopesentry

ScopeSentry-网络空间测绘、子域名枚举、端口扫描、敏感信息发现、漏洞扫描、分布式节点

scopesentry-scan

ScopeSentry工具扫描端源码

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合