JohnHubcr

bloodyAD

BloodyAD is an Active Directory Privilege Escalation Framework

Dive-into-DL-PyTorch

fork 本项目将《动手学深度学习》(Dive into Deep Learning)原书中的MXNet实现改为PyTorch实现。

dnspot

End-to-end Encrypted DNS Tunneling and C2 framework

goby_poc

goby poc or exp,分享goby最新网络安全漏洞检测或利用代码

PDFPatcher

PDF补丁丁——PDF工具箱，可以编辑书签、剪裁旋转页面、解除限制、提取或合并文档，探查文档结构，提取图片、转成图片等等

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

schtask-bypass

免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus

Apt_t00ls

fork 高危漏洞利用工具

bypasswaf

关于安全狗和云锁的自动化绕过脚本

ChatGPT-Next-Web

A well-designed cross-platform ChatGPT UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT 应用。

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

CobaltStrikeParser

ctf-archives

CTF Archives: Collection of CTF Challenges.

ctf-tools

Some setup scripts for security research tools.

CVE-2021-36260

command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

DllToShellCode

Fast Conversion Windows Dynamic Link Library To ShellCode

geacon_pro

跨平台重构了Cobaltstrike Beacon，适配了大部分Beacon的功能，行为对国内主流杀软免杀，支持4.1以上的版本。 A cross-platform CobaltStrike Beacon bypass anti-virus, supports 4.1+ version.

GodPotato

hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

HowToCook

程序员在家做饭方法指南。Programmer's guide about how to cook at home (Chinese only).

ICS-Security-Tools

Tools, tips, tricks, and more for exploring ICS Security.

kscan

Kscan是一款纯go开发的轻量级的资产发现工具，可针对指定IP段、资产清单、存活网段自动化进行端口扫描以及TCP指纹识别和Banner抓取，在不发送更多的数据包的情况下尽可能的获取端口更多信息。并且能够针对扫描结果进行自动化暴力破解，且是go平台首款开源的RDP暴力破解工具。

LRXA

rustpad

Multi-threaded Padding Oracle attacks against any service. Written in Rust.

spring4shell_behinder

CVE-2022-22965写入冰蝎webshell脚本

sql-father-backend-public

Fork项目：快速生成 SQL 和模拟数据的网站（Java 后端），大幅提高开发测试效率！by 程序员鱼皮

sylas

根据多个不同地区进行聚合查询以获取更多 fofa 数据

typoraCracker-back

修改Typora过段时间就过期的问题

WindowsElevation

Windows Elevation(持续更新)

XG_NTAI

用于Webshell木马免杀、流量加密传输