0neatsec Goto Github PK

rebeyond-mode

修改版rebeyond

redis-rogue-server

Redis 4.x/5.x RCE

redismodules-executecommand-for-windows

可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。

rediswritefile

通过 Redis 主从写出无损文件

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

redteamnotes

红队笔记

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

reverse-interview-zh

技术面试最后反问面试官的话

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

scf-proxy

云函数代理服务

sec-interview-4-2023

一个2023届毕业生在毕业前持续更新、收集的安全岗面试题及面试经验分享~

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secondarydevcobaltstrike

二次开发过后的CobaltStrike,版本为4.1.在原来CobaltStrike的基础上修改多处特征,解决流量查杀问题.

seeyon2021

seeyonAjaxGetshell,致远OA ajax.jsp未授权文件上传漏洞，java版POC，自定义shell

seeyon_ajax_exp

致远OA文件上传漏洞利用脚本,新增绕过部分url规则waf提交方式

seeyon_exp

致远OA综合利用工具

seeyonexp

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpdecryptpwd

对密码已保存在 Windwos 系统上的部分程序进行解析,包括：Navicat,TeamViewer,FileZilla,WinSCP,Xmangager系列产品（Xshell,Xftp)。

sharpersist

sharpsqltools

SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。

sharpxdecrypt

Xshell全版本密码恢复工具

shellcodeloader

shellcodeloader

shiro-1.2.4-rce

shiro <= 1.2.4 反序列化远程命令执行利用脚本

shiro-550-with-nocc

Shiro考古： Shiro-550 不依赖CC链利用工具，无限制命令执行。