zkasdla111 Goto Github PK

2017-security-ppt

2022-hw-poc

2022 护网行动 POC 整理

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本，用于节省红队人员工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

a-to-z-resources-for-students

Curated list of resources for college students

actuatorexploit

SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE

adinfo

域信息收集工具

alicloud-tools

阿里云ECS、策略组辅助小工具

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-cloud-security

awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

backstab

A tool to kill antimalware protected processes

bbscan

A tiny Batch weB vulnerability Scanner

beescan-web

网络空间资产探测、网络测绘、Go语言、分布式、扫描、资产探测、资产测绘、红队、SRC | Cyberspace Asset Detection, Network Mapping, Go Language, Distributed, Scanning, Asset Detection, Asset Mapping, Red Team, SRC

bingsubdomainsearchonline

BingSubdomainSearchOnline

bjdctf2020_january

A CTF freshman competition organized by Hangzhou Normal University, Jiangsu University of Science and Technology, and Jiangsu University

blackout

kill anti-malware protected processes (BYOVD)

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

code-audit-challenges

Code-Audit-Challenges

collection-document

Collection of quality safety articles

corspoc

corspoc

csplugins

Cobaltstrike Plugins

cve-2019-2725

CVE-2019-2725 命令回显

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

eternalblue-doublepulsar-metasploit

evil_minio

EXP for CVE-2023-28434 MinIO unauthorized to RCE

exp

收集各种各样的exp

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

fortify

源代码漏洞の审计