briefcasehi

ew

内网穿透(跨平台)

crifan_ebook_readme

Crifan的电子书的使用说明

android_app_security_crack

安卓应用的安全和破解

CN-Massage-Map

这里，真的介绍的是正规、优质按摩店（误：性感荷官，在线发牌）

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

OXID-Find

Find the host network card address through OXID Resolver

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

frpModify

修改frp支持域前置与配置文件自删除

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

PENTESTING-BIBLE

articles

Red-Team-Infrastructure-Wiki

Wiki to collect Red Team infrastructure hardening resources

Venom

Venom - A Multi-hop Proxy for Penetration Testers

Enum_For_All

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Watchdog

Watchdog是bayonet修改版，重新优化了数据库及web及扫描程序,加入多节点

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

reckdns

A kinda reckless dns resolver. Still under development.

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

nw-tips

win内网_域控安全

CrackMapExec

A swiss army knife for pentesting networks

metta

An information security preparedness tool to do adversarial simulation.

ADRecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

ADCollector

A lightweight tool to quickly extract valuable information from the Active Directory environment for both attacking and defending.

WinPwn

Automation for internal Windows Penetrationtest / AD-Security

malware-research

Code written as part of our various malware investigations

Quasar

Remote Administration Tool for Windows

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

Cyber-Defence

Information released publicly by NCC Group's Cyber Incident Response Team