smitnald Goto Github PK

reg1c1de

Registry permission scanner written in C# for finding potential privesc avenues within registry

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities使用wordlist和爆破策略，枚举Java RMI函数，并利用RMI参数反序列化漏洞

rtcp2udp

Reverse TCP Port to UDP Forwarding Tools

satansword

红队综合渗透框架

scanners-box

安全行业从业人员自研开源扫描器合集(不收录w3af、brakeman等知名扫描工具）

schtasks-backdoor

Powershell 权限维持后门

seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sectoolset

The security tool(project) Set from github。github安全项目工具集合

security_w1k1

collect

sgn

Shikata ga nai (仕方がない) encoder ported into go with several improvements

sharpc2

.NET C2 Framework Proof of Concept

shellcode-resources

Resources About Shellcode

shellcodeinjector_msbuild

shiroexploit

shiro550/721漏洞检测工具

shiroexploit_gui

ShiroExploit GUI版本

shodan-python

The official Python library for Shodan

sifter

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit them. It uses tools like blackwidow and konan for webdir enumeration and attack surface mapping rapidly using ASM.

socksoverrdp

Socks5 Proxy support for Remote Desktop Protocol / Terminal Services

sohu-project

呼搜库社工库

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

sqliscanner

Automatic SQL injection with Charles and sqlmapapi

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

ssti-payloads

🎯 Server Side Template Injection Payloads

struts-s2-xxx

整理收集Struts2漏洞环境

struts2_vulns

Struts2 vuln env

subdomainsbrute

A simple and fast sub domain brute tool for pentesters

sublist3r

Fast subdomains enumeration tool for penetration testers

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019