云环境利用框架 Cloud Exploitation Framework 方便红队人员在获得 AK 的后续工作

Basic Clone Of Impacket Secrets Dump

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

🐾Dogwalk PoC (using diagcab file to obtain RCE on windows)

一款基于docker的渗透测试工具箱，致力于做到渗透工具随身携带、开箱即用。减少渗透测试工程师花在安装工具、记忆工具使用方法上的时间和精力。

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve…

PolicyKit CVE-2021-3560 Exploit (Authentication Agent)

聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.

A full-featured regex engine in pure Go based on the .NET engine

泛微OA某版本的SQL注入漏洞

Xshell全版本密码恢复工具

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

go语言封装的各种对称加密和非对称加密，可以直接使用，包括3重DES，AES的CBC和CTR模式，还有RSA非对称加密,ECC椭圆曲线的加密和数字签名

Token stealing tool written by Go. Bypass Kaspersky,Defender,Avira, etc./Go 编写的 Token 窃取工具。免杀卡巴、Defender、小红伞等杀软

Get JSON values quickly - JSON parser for Go

A golang HTTP client library. Salute to python requests.

参考十余个项目整理的目录和文件字典

🌴Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URL and Role.

Load ssp dll golang implementation

A tool for creating hidden accounts using the registry.

This is learning to write windows 32 api instance code in the golang language

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environmen…

A blazingly fast JSON serializing & deserializing library

A powerful little TUI framework 🏗

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

Golang Bypass Av Generator template

go-zero is a web and rpc framework written in Go. It's born to ensure the stability of the busy sites with resilient design. Builtin goctl greatly improves the development productivity.