fiveaourthe Goto Github PK

404starlink2.0-galaxy

404StarLink Project 2.0 - 推荐真正优质、有意义、有趣、坚持维护的开源项目

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

atomic-red-team

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持联动xray、burp、w13scan等被动批量

awvs_nessus_scanner_api

扫描器Awvs 11和Nessus 7 Api利用脚本

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

bhg

Code samples for No Starch Press Black Hat Go

catch-browser

This is a crawler password tool

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cobalt_strike_wiki

Cobalt Strike系列

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

dirsearch

Web path scanner

dirtycow

driedmango

exploit-by-python

自己写的漏洞检测脚本

exploit-virtual-machine

f-nascan-plus

F-NAScan-PLUS 安服资产搜集

fiveaourthe.github.io

My Blog

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hacking-with-go

Golang for Security Professionals

iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

inscan

边界打点后的自动化渗透工具

internet-of-things

物联网相关笔记

java-sec-code

Java Web Common Vulnerabilities and Security Code.

javasecuritycourse

Hacking and Securing Java

javavulnerablelab

Vulnerable Java based Web Application

kb

Respositoy of all my notes on infosec I have been building up over the years

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

memshelldemo

内存马Demo合集 memshell demo for java / php / python