scriptsec's repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
AlliN
A flexible scanner
Amsi-Bypass-Powershell
This repo contains some Amsi Bypass methods i found on different Blog Posts.
awesome-cloud-security
awesome cloud security 收集一些国内外不错的云安全资源，该项目主要面向国内的安全人员
ChatGPTScanner
A white box code scan powered by ChatGPT
Cobalt_Strike_wiki
Cobalt Strike系列
ColossalAI
Making large AI models cheaper, faster and more accessible
DCSec
域控安全one for all
dolphin
dolphin 是一个的资产风险分析系统,仅需将一个主域名添加到系统中,dolphin会自动抓取与该域名相关的信息进行分析; 例如同ICP域名,子域名,对应IP,端口,URL地址,站点截图,端口协议,邮箱地址,泄露信息等.
DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
go-sec-code
Go-sec-code is a project for learning Go vulnerability code.
HackReport
渗透测试报告/资料文档/渗透经验文档/安全书籍
impacket-programming-manual
impacket编程手册
joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs
llama
Inference code for LLaMA models
POC_Collect
(持续更新)本项目为存储团队Bot小K每日监测到的最新POC，EXP，以及自己平时总结的POC，为了方便渗透测试过程中，漏洞查询，脱网环境的渗透测试。
PrivescCheck
Privilege Escalation Enumeration Script for Windows
Proxy-Attackchain
proxylogon & proxyshell & proxyoracle & proxytoken & all exchange server vulns summarization :)
scalpel
scalpel是一款命令行漏洞扫描工具，支持深度参数注入，拥有一个强大的数据解析和变异算法，可以将常见的数据格式（json, xml, form等）解析为树结构，然后根据poc中的规则，对树进行变异，包括对叶子节点和树结构 的变异。变异完成之后，将树结构还原为原始的数据格式。 原理：https://mp.weixin.qq.com/s/U_llBwC05vb84U9wb8NZog
scan4all
Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...
SharpExchangeKing
Exchange 服务器安全性的辅助测试工具
sliver
Adversary Emulation Framework
tools-note
常用工具收集
web-sec
WEB安全手册(红队安全技能栈)，漏洞理解，漏洞利用，代码审计和渗透测试总结。【持续更新】
wsMemShell
WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
zpscan
一个有点好用的信息收集工具。A somewhat useful information gathering tool.