windows1988 Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

3ds-max-primitives-importer

404starlink-project

Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.

agentsmith-hids

By Kprobe technology Open Source Host-based Intrusion Detection System(HIDS), from E_Bwill.

alaris

A protective and Low Level Shellcode Loader the defeats modern EDR systems.

amsitrigger

The Hunt for Malicious Strings

and64inlinehook

Lightweight ARMv8-A(ARM64, AArch64, Little-Endian) Inline Hook Library for Android C/C++

android-injector

(untested) Inject so & apk into zygote on android. Support armv8 & armv7.

android-luajit-launcher

Android NativeActivity based launcher for LuaJIT, implementing the main loop within Lua land via FFI

androidsecuritystudy

安卓应用安全学习

appproxyc2

arbitrium-rat

Arbitrium is a cross-platform, fully undetectable remote access trojan, to control Android, Windows and Linux and doesn't require any firewall exceptions or port forwarding rules

assetstudio

AssetStudio is a tool for exploring, extracting and exporting assets and assetbundles.

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

autordpwn

The Shadow Attack Framework

awesome-hacking

Awesome hacking is an awesome collection of hacking tools.

awesome-hacking-lists

平常看到好的渗透hacking工具和多领域效率工具的集合

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-virtualization

Collection of resources about Virtualization

awesome-web-security

🐶 A curated list of Web Security materials and resources.

backdoorplz

adding a backdooruser using win32api

bangcle

The second generation Android Hardening Protection

blog

bruteshark

Network Analysis Tool

bypassuac

Use ICMLuaUtil to Bypass UAC!

c-sharp-memory-injection

A set of scripts that demonstrate how to perform memory injection in C#

capev2

Malware Configuration And Payload Extraction

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cecil

Cecil is a library to inspect, modify and create .NET programs and libraries.

cefdebug

Minimal code to connect to a CEF debugger.