Dr-dot-droid's repositories
awesome-webshell
Awesome webshell collection. Including 150 Github repo, and 200+ blog posts.
cf
Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作
command
红队常用命令速查
CVE-2021-22005
CVE-2021-22005 - VMWare vCenter Server File Upload to RCE
Emergency-Response-Notes
应急响应实战笔记，一个安全工程师的自我修养。
exphub
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340
Godzilla
哥斯拉
hack-requests
The hack-requests is an http network library for hackers
K8tools
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
Kernelhub
:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)
linux-command
Linux命令大全搜索工具，内容包含Linux命令手册、详解、学习、搜集。https://git.io/linux
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
PentesterSpecialDict
渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker
php-webshells
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!
PocOrExp_in_Github
聚合Github上已有的Poc或者Exp，CVE信息来自CVE官网。Auto Collect Poc Or Exp from Github by CVE ID.
PowerSploit
PowerSploit - A PowerShell Post-Exploitation Framework
Struts2-052-POC
A vulnerability verification script for S2-052
ThinkphpGUI
Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。
webshell-bypassed-human
过人 webshell 的生成工具
Windows-Exploit-Suggester
This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.
wpxmlrpcbrute
Brute force WordPress sites vulnerabile to XML-RPC amplification.
xray-crack
xray社区高级版证书生成，仅供学习研究，正常使用请支持正版