rolandx Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

acme.sh

A pure Unix shell script implementing ACME client protocol

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aggressorscripts

Aggressor scripts for use with Cobalt Strike 3.0+

anti-virus-evading-payloads

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Whether accomplished by phishing emails, delivering a payload through an exploit, or social engineering, running code on target computers is part of most penetration tests. That means that you w

api-securityempire

API Security Project aims to present unique attack & defense methods in API Security field

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

av_evasion_tool

掩日 - 免杀执行器生成工具

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-cybersecurity-handbooks

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

awesome-poc

一个各类漏洞POC知识库

awesome-reversing

A collection of resources to learn Reverse Engineering from start!

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

chatgpt-your-red-team-ally

The notebook for my talk - ChatGPT: Your Red Teaming Ally

clash_for_windows_pkg

cobalt_strike_wiki

Cobalt Strike系列

cve-2023-34040

Spring-Kafka-Deserialization-Remote-Code-Execution

d3m0n1z3dshell

Demonized Shell is an Advanced Tool for persistence in linux.

demo-mubu

demo with mubu

dict

docker-jenkins

Jenkins in a Docker container

dockerexploit

Docker Remote API Scanner and Exploit

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

godpotato

golin

弱口令检测、 漏洞扫描、端口扫描（协议识别，组件识别）、web目录扫描、等保模拟定级、自动化运维、等保工具（网络安全等级保护现场测评工具）内置3级等保核查命令、基线核查工具

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hackerone-reports

Top disclosed reports from HackerOne

helm-charts

Source & Repo of https://charts.kubesphere.io/main & https://charts.kubesphere.io/test

hide-cobaltstrike

Hide your CobaltStrike PRO