gaoqiqiang's repositories
awesome-macos-command-line
Use your macOS terminal shell to do awesome things.
0xagent
CobaltStrike 4.0 - 4.5 Patch
2022-HW-POC
2022 护网行动 POC 整理
atomic-red-team
Small and highly portable detection tests based on MITRE's ATT&CK.
Awesome-Redteam
一个红队知识仓库
configuration_profiles
macOS Configuration Profiles
electroniz3r
Take over macOS Electron apps' TCC permissions
goproxy
An HTTP proxy library for Go
Huorong-ATP-Rules
一款火绒增强HIPS自定义规则
ios_15_rce
Remote Code Execution V1 For iOS 15 sent through airdrop after the device was connected to a trusted host
JNDIExploit
一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。
macOS-Security-and-Privacy-Guide
Guide to securing and improving privacy on macOS
mdatp-xplat
Microsoft Defender for macOS/Linux - config samples, auxiliary tools
MenoyGone
Attack cobalt strike server’s FCS by DoS
micromdm
Mobile Device Management server
Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
profiles
Management profiles for OS X / macOS
PyWxDump
获取微信账号信息(昵称/账号/手机/邮箱/数据库密钥/wxid)；PC微信数据库读取、解密脚本；聊天记录查看工具；聊天记录导出为html(包含语音图片)。支持多账户信息获取，支持所有微信版本。
Threathunting-book
ATT&CK理解+sigma规则研究
videosnap
Simple command line app to record video and audio from a QuickTime capture device
Z1-AggressorScripts
适用于Cobalt Strike的插件