0x9f99's starred repositories
domi-owned
IBM/Lotus Domino exploitation
Cobalt_Strike_wiki
Cobalt Strike系列
elasticpwn
Scripts for ElasticSearch vulns
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
commando-vm
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com
aggressor-script-cn
aggressor-script 中文翻译 aggressor-script 使用
PowerView3-Aggressor
Cobalt Strike Aggressor script menu for Powerview/SharpView
Pentest-and-Development-Tips
A collection of pentest and development tips
SendMail-with-Attachments
Use powershell to send mail
Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
SprayingToolkit
Scripts to make password spraying attacks against Lync/S4B, OWA & O365 a lot quicker, less painful and more efficient
metasploitable3
Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
SimplyEmail
Email recon made fast and easy, with a framework to build on
struts-scan
Python2编写的struts2漏洞全版本检测和利用工具
Google-Domain-fronting
Domain fronting using Google app engine
ReflectiveDLLInjection
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
spiderfoot
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.
datasploit
An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.
FiercePhish
FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
king-phisher
Phishing Campaign Toolkit