nanaao Goto Github PK

-baseline-check

windows和linux基线检查，配套自动化检查脚本。纯手打。

0d1n

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

0day-1

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

100-redteam-projects

Projects for security students

14finger

功能齐全的Web指纹识别和分享平台,基于vue3+django前后端分离的web架构，并集成了长亭出品的rad爬虫的功能，内置了一万多条互联网开源的指纹信息。

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2018-blackhat-tools-list

2018 BlackHat Tools List

2021cdn

2022-hw-poc

2022 护网行动 POC 整理

2023hvv

2023 HVV情报速递~

3snake

Tool for extracting information from newly spawned processes

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

6-eyed-spider

Post-exploitation tool collects data going out and coming into the browser and makes use of it.

7kbscan-webpathbrute

7kbscan-WebPathBrute Web路径暴力探测工具

aakian-v1.0

基于前端vue框架的JavaFx图形化GUI漏洞扫描工具，支持一键扫描vue-manage-system系统前端泄露的未授权目录接口漏洞，并且对扫描的暴露目录进行逐一测试和验证，方便渗透人员快速确定未授权接口。还添加了出口IP地址信息本地DNS信息等的查询，方便清楚自身出口IP。

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

acido

Azure Container Instances Distributed Operations (acido CLI) for Red Team Operations through Azure Cloud.

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

activedirectoryredteaming

Tools & TTP's for Active Directory Red Teaming

ad_pentest

红队|域渗透重要漏洞汇总(持续更新)

adalanche

Active Directory ACL Visualizer and Explorer - who's really Domain Admin?

adcscoercepotato

adcspwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

adhrit

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

adinfo

域信息收集工具

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

afl

american fuzzy lop - a security-oriented fuzzer

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

agartha

a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation and more.