gold1029

Probable-Wordlists

Sublist3r

003Recon

Some tools to automate recon - 003random

awesome-backend-architecture

后端开发常用技术框架、数据库、开源中间件、微服务、系统架构集合。

b374k-webshell-4.1

BEWGor-Wordlist-Generator

brawl-public-game-001

Data from a BRAWL Automated Adversary Emulation Exercise

CISSP-OSG-8th-note

CISSP OSG 8th学习笔记

CobaltStrike-Toolset

Aggressor Script, Kits, Malleable C2 Profiles, External C2 and so on

ContinuousIntrusion

DNSLog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

EventCleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

exploits

Miscellaneous exploit code

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

getpass

a mini tool to dump password and NTLM hash from WDigest & MSV1_0 & tspkg, as a result of study of mimikatz

HideShell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

JspSpy.jsp

Jsp木马远程控制脚本（大马）

linux-insides-zh

Linux 内核揭密

Mind-Map

NessusReportInChinese

半自动化将 Nessus 英文报告（csv格式）生成中文 excel ，中文漏洞库已有700多条常见漏洞，后续再进一步加上新漏洞自动翻译，实现全自动化

pocs

Proof of Concepts (PE, PDF...)

PPT

PPT教程

ptrace

a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志

Red-Teaming-Toolkit

redis_lua_exploit

RedSharp

Penetration Test / Read Team - C# tools repository

RedTeam

RedTeam资料收集整理

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

xss_payloads