chesterblue

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

ShuiZe_0x727

信息收集自动化工具

Rubeus

Trying to tame the three-headed dog.

BloodHound

Six Degrees of Domain Admin

mimikatz

A little tool to play with Windows security

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

olist213_Information_Security_Books

150本信息安全方面的书籍书籍（持续更新）

htop

htop - an interactive process viewer

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

blog

nacs

事件驱动的渗透测试扫描器 Event-driven pentest scanner

ShellCode_Loader

ShellCode_Loader - Msf&CobaltStrike免杀ShellCode加载器、Shellcode_encryption - 免杀Shellcode加密生成工具，目前测试免杀360&火绒&电脑管家&Windows Defender（其他杀软未测试）。

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

Artillery

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

DllToShellCode

Fast Conversion Windows Dynamic Link Library To ShellCode

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Dictionary-Of-Pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

vlmcsd

KMS Emulator in C (currently runs on Linux including Android, FreeBSD, Solaris, Minix, Mac OS, iOS, Windows with or without Cygwin)

py-kms

KMS Server Emulator written in Python

VulApps

快速搭建各种漏洞环境(Various vulnerability environment)

Attack-Defense-Challenges

Challenges of CTF Attack with Defense mode

Cardinal

CTF🚩 AWD (Attack with Defense) 线下赛平台 / AWD platform - 欢迎 Star~ ✨

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

DnslogCmdEcho

命令执行不回显但DNS协议出网的命令回显场景解决方案

SNETCracker

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

gophish

Open-Source Phishing Toolkit

SCFProxy

A proxy tool based on cloud function.

JavaDeserH2HC

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).