g4tg007

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

sysmon-cheatsheet

All sysmon event types and their fields explained

eat_pyspark_in_10_days

pyspark🍒🥭 is delicious，just eat it!😋😋

tools

Python渗透漏洞工具

DNSLog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

shodan-python

The official Python library for Shodan

jdwp-shellifier

OneForAll

OneForAll是一款功能强大的子域收集工具

LuWu

红队基础设施自动化部署工具

yulong-hids-archived

[archived] 一款实验性质的主机入侵检测系统

ALB

攻击日志分析工具

web-log-parser

An open source analysis web log tool

AssassinGo

An extensible and concurrency pentest framework in Go, also with WebGUI. Feel free to CONTRIBUTE!

Loki

Loki - Simple IOC and YARA Scanner

Python

All Algorithms implemented in Python

Linux_kernel_exploits

Repo for FUZE project. I will also publish some Linux kernel LPE exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

Evaluation_tools

测评工具

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

GithubMonitor

根据关键字与 hosts 生成的关键词，利用 github 提供的 api，监控 git 泄漏。

goscan

Interactive Network Scanner

dns_tunnel_dectect_with_CNN

dns tunnel dectect with CNN

WebPocket

Exploit management framework

awesome-incident-response

A curated list of tools for incident response

Micro8

Gitbook

PrivExchange

Exchange your privileges for Domain Admin privs by abusing Exchange

CVE-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

wtfpython-cn

wtfpython的中文翻译/施工结束/ 能力有限，欢迎帮我改进翻译

marshalsec