qiaomu2333 Goto Github PK

kdigger

kdigger is a context discovery tool for Kubernetes penetration testing.

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

krbrelayx

Kerberos unconstrained delegation abuse toolkit

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

litephish

lite weight phishing tool with graphical panel and 19+ pages

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

monitoring-directory-demo

花了一小会时间写的目录监控样本/ Took a little time to write a monitoring directory demo

powercat

netshell features all in version 2 powershell

powershell-payload-excel-delivery

Uses Invoke-Shellcode to execute a payload and persist on the system.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

qiaomu2333.github.io

redteam-backup

一些紅隊資料備份

rubshell

A simple (and ugly) ruby-based webshell.

shadowsteal

Pure Nim implementation for exploiting CVE-2021-36934, the SeriousSAM local privilege escalation

sharpkatz

Porting of mimikatz sekurlsa::logonpasswords, sekurlsa::ekeys and lsadump::dcsync commands

shellcode_launcher

Shellcode launcher utility

shiroscanplus

ShiroScanPlus是基于sv3nbeast/ShiroScan改进的增强版的Shiro反序列化一键检测工具

spoofing-office-macro

:fish: PoC of a VBA macro spawning a process with a spoofed parent and command line.

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

superwordlist

基于实战沉淀下的各种弱口令字典

sysmon-config

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

sysmon-modular

A repository of sysmon configuration modules

syswhispers2

AV/EDR evasion via direct system calls.

unix-privilege-escalation-exploits-pack

Exploits for getting local root on Linux, BSD, AIX, HP-UX, Solaris, RHEL, SUSE etc.

vulnerability-analysis

Vulnerability-analysis Poc、python shell

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

webshell

This is a webshell open source project

webshell-1

aspx webshell

webshell-sample

收集自网络各处的 webshell 样本，用于测试 webshell 扫描器检测率。

webshells

php - asp - aspx