pghook Goto Github PK

redalert

原型版本

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

resources-for-learning-hacking

All the resources I could find for learning Ethical Hacking and penetration testing.

s2-046-poc

S2-046-PoC

scanners-box

[Project-Kob-6]The toolbox of opensource scanners - 安全行业从业人员自研开源扫描器合集👻

scapy_zh-cn

Scapy中文使用文档

scylla

Intelligent proxy pool for Humans™，为人类设计的智能代理池

sec-chart

安全思维导图集合

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sfish_pt

shadowbroker

shuize_0x727

信息收集自动化工具

sicklepoc

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

spring-boot-vulnerability

spring4shell_behinder

CVE-2022-22965写入冰蝎webshell脚本

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

sqliscanner

Automatic SQL injection with Charles and sqlmap api

sqlmap_celery

分布式的sqlmapapi

ssrf-lab

Lab for exploring SSRF vulnerabilities

struts2-057-exp

s2-057 最新漏洞分析和EXP脚本

struts2-scan

Struts2全漏洞扫描利用工具

suricata-rules

Suricata IDS rules 用来检测红队渗透/恶意行为等，支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

test.github.io

tools

一些实用的python脚本

typeidea

Django企业开发实战对应项目代码

voyager

一个安全工具集合平台，用来提高乙方安全人员的工作效率，请勿用于非法项目

vtest

用于辅助安全工程师漏洞挖掘、测试、复现，集合了mock、httplog、dns tools、xss，可用于测试各类无回显、无法直观判断或特定场景下的漏洞。

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)