ST0new's repositories
douyin_Auto
使用python+Airtest 编写的自动刷抖音等短视频脚本
Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
CuiRi
一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。
geacon_pro
重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.
BilibiliTask_2
BilibiliTask_2
goShellCodeByPassVT
通过线程注入及-race参数免杀全部VT
Homework-of-Python
Python codes of my blog.
jQuery-with-XSS
jQuery with XSS, Testing and Secure Version
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
picker
将你的repo变为讨论社区
PoC-in-GitHub
PoC auto collect from GitHub.
poc-proxycommand-vulnerable
Proof of conept to exploit vulnerable proxycommand configurations on ssh clients
Python
All Algorithms implemented in Python
RabbitMQBruter
写了一个简单的Rabbit密码爆破
Rubeus
Trying to tame the three-headed dog.
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Threathunting-book
Threat hunting Web Windows AD linux ATT&CK TTPs
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
webshell
This is a webshell open source project
WeChatOpenDevTools-Python
WeChatOpenDevTool 微信小程序强制开启开发者工具
WXLovePush
这是一个推送每日心情到微信公众号的代码
xray
一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
yingji
应急相关内容积累