Sh4Nn0n-cn

iterm2-zmodem

在 Mac 下，实现与服务器进行便捷的文件上传和下载操作

aliyun-accesskey-Tools

阿里云accesskey利用工具

reverse_lianjia_wxapkg

逆向链家微信小程序，解析 请求的加密方式获取数据

spark

Apache Spark - A unified analytics engine for large-scale data processing

red_team_tool_countermeasures

WeblogicEnvironment

Weblogic环境搭建工具

OneForAll

OneForAll是一款功能强大的子域收集工具

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

as_bypass_php_disable_functions

antsword bypass PHP disable_functions

BurpShiroPassiveScan

一款基于BurpSuite的被动式shiro检测插件

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

loguru

Python logging made (stupidly) simple

Arsenal

Cobalt Strike 3.13 Arsenal Kit

AntiHoneypot-Chrome-simple

Chrome 蜜罐检测插件

ShiroRce-Burp

SecToolSet

The security tool(project) Set from github。github安全项目工具集合

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

book_notes

CAS_EXP

CAS 硬编码 远程代码执行漏洞

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

vulnerability_library

厂商未公开漏洞库

the-way-to-go_ZH_CN

《The Way to Go》中文译本，中文正式名《Go 入门指南》

RMIDeserialize

RMI 反序列化环境 一步步

sharpwmi

sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

reGeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

Taie-RedTeam-OS

泰阿安全实验室-基于XUbuntu私人订制的红蓝对抗渗透操作系统

python_code_audit

python 代码审计项目