fengyuhetao

shell

Linux命令行与shell脚本编程大全案例

Code

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

ServerScan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

Automatic-permission-maintenance

CobaltStrike 上线自动权限维持插件

Behinder-Source

Source code of Behinder, a shell manager.冰蝎源码，反编译，当前版本3.0 Beta6，支持内存马注入

beian_miit_spider

一个工业和信息化部ICP备案查询的爬虫

burpsuite_hack

一款代理扫描器

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

CobaltStrike

CobaltStrike's source code

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@fireeye.com

CVE-2021-1732-Exploit

CVE-2021-1732 Exploit

CVE-2021-21972

CVE-2021-21972 Exploit

CVE-2021-21973

Proof of Concept Exploit for vCenter CVE-2021-21972

DBJ

大宝剑-信息收集和资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

EHole-1

EHole(棱洞)2.0 重构版-红队重点攻击系统指纹探测工具

ExpDemo-JavaFX

图形化漏洞利用Demo-JavaFX版

FridaContainer

FridaContainer 整合了网上流行的和自己编写的常用的 frida 脚本，为逆向工作提效之用。

LDAPKit

自用的LDAP测试工具，一键启动

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

Malleable-C2-Profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

MemoryShell

JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring

memShell

FilterBased/ServletBased in memory shell for Tomcat and some other middlewares

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

privacy

个人数据泄漏检测网站，适用于近期流传的 40GB+ 数据。

RedTeaming2020

RedTeaming知识星球2020年安全知识汇总

ShuiZe_0x727

信息收集自动化工具

Stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

strongR-frida-android

An anti detection version frida-server for android.

WechatDecrypt

微信消息解密工具