cc06

impacket

Impacket is a collection of Python classes for working with network protocols.

ffuf

Fast web fuzzer written in Go

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

POC

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了900多个poc/exp，长期更新。

AppInfoScanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

pingtunnel

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

Kernelhub

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

OffensiveNim

My experiments in weaponizing Nim (https://nim-lang.org/)

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

CrossC2

generate CobaltStrike's cross-platform payload

PrivacySentry

Android隐私合规整改检测工具，注解+Asm修改字节码的检测方案

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

vulnerability-paper

收集的文章 https://mrwq.github.io/tools/paper/

pystinger

Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具

DongTai

Dongtai IAST is an open-source Interactive Application Security Testing (IAST) tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable for use in the testing phase of the development pipeline.

CVE-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

ysomap

A helpful Java Deserialization exploit framework.

BypassAV

Cobalt Strike插件，用于快速生成免杀的可执行文件

Proxmark3GUI

A cross-platform GUI for Proxmark3 client | 为PM3设计的跨平台图形界面

spp

A simple and powerful proxy

ApolloScanner

自动化巡航扫描框架（可用于红队打点评估）

HostCollision

用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fastjson-1.2.47-RCE

Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法

JNDIMap

JNDI 注入利用工具, 支持 RMI 和 LDAP 协议, 包含多种高版本 JDK 绕过方式 | A JNDI injection exploit tool that supports RMI and LDAP protocols, including a variety of methods to bypass higher-version JDK

Address

cve-2021-22005-exp

Penetration_Testing_POC

Neo-reGeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg