rassec Goto Github PK

reconftw

Simple script for full recon

reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

reconpi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

red-team

Red-Team Attack Guid

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-team-scripts

A collection of Red Team focused tools, scripts, and notes

red_team_tool_countermeasures

redis-rce

remote code execute for redis4 and redis5

redis-rogue-server

Redis 4.x/5.x RCE

redis_lua_exploit

redisdirscan

此脚本用于测试 Rdies 未授权访问，在没权限写ssh私钥和定时任务又不知道web绝对路径的情况下，进行WEB目录探测

redismodules-executecommand-for-windows

可在Windows下执行系统命令的Redis模块，可用于Redis主从复制攻击。

rediswritefile

通过 Redis 主从写出无损文件

redress

Redress - A tool for analyzing stripped Go binaries

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

redteamer

红方人员作战执行手册

redteamtools

记录自己写的部分工具

redtool

日常积累的一些红队工具及自己写的脚本，更偏向于一些diy的好用的工具，并不是一些比较常用的msf/awvs/xray这种

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

relative-url-extractor

A small tool that extracts relative URLs from a file.

rengine

reNgine is an automated reconnaissance framework meant for information gathering during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

resource-library

分享一些自己收集、整合、原创的公开资源

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

reverse-shell-generator

Web-based reverse shell generator

rexsser

This is a burp plugin that extracts keywords from response using regexes and test for reflected XSS on the target scope.

rhizobia_j

JAVA安全SDK及编码规范

riskscanner

RiskScanner 是开源的公有云安全合规扫描平台，通过 Cloud Custodian 的 YAML DSL 定义扫描规则，实现对主流公有云资源的安全合规扫描及使用优化建议。

rmi-attack-demo

在学习Java反序列化漏洞的过程中，用来理解Java RMI程序的执行流程，演示如何攻击Java RMI程序的几个示例。

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities