ShainEli

2020-Vulnerabilities

2020年漏洞复现大全

BloodHound

Six Degrees of Domain Admin

HackBar

HackBar plugin for Burpsuite

emp3r0r

Linux/Windows post-exploitation framework made by linux user

FourEye

AV Evasion Tool For Red Team Ops

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

MDUT

MDUT - Multiple Database Utilization Tools

weevely3

Weaponized web shell

Ladon

Ladon大型内网渗透工具，可PowerShell模块化、可CS插件化、可内存加载，无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。Ladon 12.2内置262个功能,网络资产探测模块32个通过多种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)以及方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等信息，高危漏洞检测16个含MS17010、Zimbra、Exchange

Z1-AggressorScripts

适用于Cobalt Strike的插件

taowu-cobalt_strike

Erebus

CobaltStrike后渗透测试插件

Cobalt-Strike-Aggressor-Scripts

Cobalt Strike Aggressor 插件包

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

ghidra

Ghidra is a software reverse engineering (SRE) framework

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

ptf

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

cloud-atlas-draft

Cloud Compute Technology Guide

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

LuLu

LuLu is the free macOS firewall

thc-hydra

hydra

pikachu

一个好玩的Web安全-漏洞测试平台

Kunlun-M

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

MailSniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

BadUSB-code

收集badusb的一些利用方式及代码

CaptfEncoder

Captfencoder is opensource a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools.

usbarmory

USB armory - The open source compact secure computer