LwSe

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

blackeye

The ultimate phishing tool with 38 websites available!

ShiroExploit-Deprecated

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

tmux-config

:green_book: Example tmux configuration - screen + vim key-bindings, system stat, cpu load bar.

PoshC2

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

exploits

Pwn stuff.

BurpSuitePro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

python-o365

A simple python library to interact with Microsoft Graph and Office 365 API

CredSniper

CredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.

BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

aliyun-accesskey-Tools

阿里云accesskey利用工具

HackTheWorld

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

WMImplant

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is translated into a WMI-equivalent for use on a network/remote machine. WMImplant is WMI based.

Spray

A Password Spraying tool for Active Directory Credentials by Jacob Wilkin(Greenwolf)

awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Chankro

Herramienta para evadir disable_functions y open_basedir

BadDNS

LethalHTA

Lateral Movement technique using DCOM and HTA

footprint

个人笔记

domi-owned

IBM/Lotus Domino exploitation

solr_rce

Apache Solr RCE via Velocity template

repos

List of Repositories

nsf2x

A Lotus Notes NSF to EML, MBOX and PST converter

CVE-2021-24085

hodler

hodler converts iTerm 2 color schemes into forms that X resources users (XTerm) and Suckless Simple Terminal users, Alacritty users, and Linux Virtual Terminal users can use.

sourceincite.github.io

cve-2020-2555

CVE-2020-2555

phproxy

Public Domain PHP-based Proxy, abandoned by WhiteFyre