Support ALL Windows Version

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

这是一个抓取浏览器密码的工具，后续会添加更多功能

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

Pre-Built Vulnerable Environments Based on Docker-Compose

Weblogic com.tangosol.util.extractor.ReflectionExtractor RCE

CVE-2020-2555

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

A tool for embedding XXE/XML exploits into different filetypes

自己学习java安全的一些总结，主要是安全审计相关

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

some slides

You Know, For WEB Fuzzing !

PowerSploit - A PowerShell Post-Exploitation Framework

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

Netview enumerates systems using WinAPI calls

GitHub repository for sysadmin related tools

搜集了市面上绝大部分weblogic解密方式，整理了7种解密weblogic的方法及响应工具。

PEDA - Python Exploit Development Assistance for GDB

Dex to Java decompiler

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

“冰蝎”动态二进制加密网站管理客户端

一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo

Web安全相关内容

This is a webshell open source project

BCS（北京网络安全大会）2019 红队行动会议重点内容

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability