Ma3k4H3d

impacket

Impacket is a collection of Python classes for working with network protocols.

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

secbook

信息安全从业者书单推荐

fapro

Fake Protocol Server

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

vulfocus

🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

Kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

firmadyne

Platform for emulation and dynamic analysis of Linux-based firmware

pocs

awesome-csirt

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

mimikatz

A little tool to play with Windows security

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

CVE-2020-17144

weaponized tool for CVE-2020-17144

APTMalwareNotes

A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").

APTnotes

Various public documents, whitepapers and articles about APT campaigns

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

ttygif

Convert terminal recordings to animated gifs

driller

Driller: augmenting AFL with symbolic execution!

CopyTranslator

Foreign language reading and translation assistant based on copy and translate.

GifCapture

🏇 Gif capture app for macOS

ghidra

Ghidra is a software reverse engineering (SRE) framework

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

binwalk

Firmware Analysis Tool

angrgdb

Use angr inside GDB. Create an angr state from the current debugger state.

unicorefuzz

Fuzzing the Kernel Using Unicornafl and AFL++

ctf-challenges

awesome-cve-poc

✍️ A curated list of CVE PoCs.