Lists (1)
Stars
一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.
Extract all forensic interesting information of Firefox, Iceweasel and Seamonkey browsers
Another Windows Local Privilege Escalation from Service Account to System
fastjson利用，支持tomcat、spring回显，哥斯拉内存马；回显利用链为dhcp、ibatis、c3p0。
🐧 Abuse of Google Colab for cracking hashes.
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )
PowerShell toolkit for AD CS auditing based on the PSPKI toolkit.
PowerSploit - A PowerShell Post-Exploitation Framework
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Windows Local Privilege Escalation from Service Account to System
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Six Degrees of Domain Admin
Password decryption tool for the McAfee SiteList.xml file
Powershell script to extract information from boot PXE
lgandx / Responder
Forked from SpiderLabs/ResponderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
E-mails, subdomains and names Harvester - OSINT
蓝队分析研判工具箱，功能包括内存马反编译分析、各种代码格式化、网空资产测绘功能、溯源辅助、解密冰蝎流量、解密哥斯拉流量、解密Shiro/CAS/Log4j2的攻击payload、IP/端口连接分析、各种编码/解码功能、蓝队分析常用网址、java反序列化数据包分析、Java类名搜索、Fofa搜索、Hunter搜索等。
Linux privilege escalation auditing tool