apache-nifi-api-rce

bloodhound

Six Degrees of Domain Admin

bloodhound-customqueries

Custom Queries - Brought Up to BH4.1 syntax

broken5

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

bypass-av-note

免杀技术大杂烩---乱拳打死老师傅

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chromeplugincrx

离线安装Chrome插件-插件备份

csbruter

Cobalt Strike team server password brute force tool

cve-2018-15473-exp

This is a exp of CVE-2018-15473

cve-2021-1732

CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc/Exploit开发

cve-2021-40444

CVE-2021-40444 PoC

dashboard

General-purpose web UI for Kubernetes clusters

domaintools

内网域渗透小工具

dumpthatlsass

Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation , it contains Anti-sandbox , if you run it under unperformant Virtual Machine you need to uncomment the code related to it and recompile.

eassniper

EASSniper is a penetration testing tool for account enumeration and brute force attacks against Exchange Active Sync (EAS).

ecologyexp.jar

泛微oa数据库配置文件读取

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

expbox

Vulnerability Exploitation Code Collection Repository

exploits

flash-pop

Flash钓鱼弹窗版

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hack

渗透测试资源库

homework-of-powershell

powershell codes of my blog.

invoke-buildanonymoussmbserver

Use to build an anonymous SMB file server.

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11（无弹窗版）

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

joomla-3.4.6-rce

Joomla 3.4.6 – Remote Code Execution