Giters
Hdys0vn

Hdys0vn

Geek Repo

4

followers

71

following

563

stars

Github PK Tool:Github PK Tool

Hdys0vn's starred repositories

SpringBoot-Scan

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

Language:PythonLicense:MITStargazers:1501Issues:13Issues:17

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

Language:C#License:NOASSERTIONStargazers:1129Issues:34Issues:13

db-monthly

阿里云数据库内核月报分类整理（定时更新） http://mysql.taobao.org/monthly/

License:Apache-2.0Stargazers:993Issues:50Issues:2

lzCloudSecurity

《云安全攻防入门》教材

Stargazers:978Issues:9Issues:2

pywerview

A (partial) Python rewriting of PowerSploit's PowerView

Language:PythonLicense:GPL-3.0Stargazers:865Issues:16Issues:36

NacosExploitGUI

Nacos漏洞综合利用GUI工具，集成了默认口令漏洞、SQL注入漏洞、身份认证绕过漏洞、反序列化漏洞的检测及其利用

Language:JavaStargazers:854Issues:13Issues:15

fuzz4bounty

1337 Wordlists for Bug Bounty Hunting

Stargazers:660Issues:7Issues:0

bufferfly

攻防演习/渗透测试资产处理小工具，对攻防演习/渗透测试前的信息搜集到的大批量资产/域名进行存活检测、获取标题头、语料提取、常见web端口检测等。

Language:PythonStargazers:630Issues:9Issues:8

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

Language:GoLicense:MITStargazers:621Issues:9Issues:12

DNSStager

Hide your payload in DNS

Language:PythonLicense:GPL-3.0Stargazers:601Issues:13Issues:6

pandora

A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.

Language:C++License:MITStargazers:560Issues:7Issues:4

ctf_challenges

适用于一线安服的ctf培训题目，全docker环境一键启动

Language:PHPStargazers:506Issues:9Issues:3

API-T00L

互联网厂商API利用工具。

Language:JavaLicense:GPL-3.0Stargazers:468Issues:4Issues:3

GhostTask

A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.

Language:CLicense:MITStargazers:455Issues:6Issues:1

spray

Next Generation HTTP Dir/File Fuzz Tool

Language:GoLicense:GPL-3.0Stargazers:438Issues:7Issues:50

APIFuzzer

Fuzz test your application using your OpenAPI or Swagger API definition without coding

Language:PythonLicense:GPL-3.0Stargazers:414Issues:9Issues:47

TakeMyRDP

A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.exe and CredentialUIBroker.exe)

Language:C++License:MITStargazers:354Issues:6Issues:0

CredPhish

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

Language:PowerShellStargazers:281Issues:5Issues:2

ocean_ctf

CTF平台 支持docker 动态部署题目、分数统计、作弊检测，静态题目，漏洞复现,ctf platform,

Language:PythonLicense:MITStargazers:278Issues:5Issues:42

DnslogCmdEcho

命令执行不回显但DNS协议出网的命令回显场景解决方案

Language:PythonStargazers:268Issues:1Issues:2

DNS_Tunneling

DNS Tunneling using powershell to download and execute a payload. Works in CLM.

Language:PythonStargazers:214Issues:9Issues:1

TorProxy

利用Tor搭建Socks5代理，动态切换IP

Language:ShellStargazers:202Issues:3Issues:2

ADCSync

Use ESC1 to perform a makeshift DCSync and dump hashes

Language:PythonStargazers:194Issues:1Issues:0

SharpVeeamDecryptor

Decrypt Veeam database passwords

Language:C#License:BSD-3-ClauseStargazers:147Issues:2Issues:0

docker_api_vul

docker 未授权访问漏洞利用脚本

Language:PythonStargazers:140Issues:5Issues:1

SocBook

安全运营部署指南（wazuh部署指南）

License:Apache-2.0Stargazers:136Issues:4Issues:0

AnswerPHP

一个帮助你PHP反序列化的python工具

Language:PythonLicense:AGPL-3.0Stargazers:69Issues:2Issues:0

kubetcd

Post-exploit a compromised etcd, gain persistence and remote shell to nodes.

Language:GoLicense:Apache-2.0Stargazers:69Issues:6Issues:1

LDAPMon

Language:C++License:MITStargazers:43Issues:4Issues:0

IP_DOMAIN_TOOL

IP domain collation tool

Language:PythonStargazers:11Issues:0Issues:0