jack51706

SourceLeakHacker

:bug: A multi threads web application source leak scanner

Glass

Glass是一款针对资产列表的快速指纹识别工具，通过调用Fofa/ZoomEye/Shodan/360等api接口快速查询资产信息并识别重点资产的指纹，也可针对IP/IP段或资产列表进行快速的指纹识别。

EHole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

WebAliveScan

对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描

AUTO-EARN

一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具

hack-er-tools

emergency response toolkit

emergency-response-checklist

应急响应指南 / emergency response checklist

Pentest-Tools-Collection

PageTableInjection

Code Injection, Inject malicious payload via pagetables pml4.

blue-pigeon

Blue Pigeon is a Bluetooth-based data exfiltration and proxy tool to enable communication between a remote Command and Control (C2) server and a compromised host.

autoharness

A tool that automatically creates fuzzing harnesses based on a library

ATT-CK-CN

ATT&CK实操

RedTeamTools

记录自己编写、修改的部分工具

OffenSiveCSharp

Offensive C# Tooling

FalconEye

riskscanner

RiskScanner 是开源的多云安全合规扫描平台，基于 Cloud Custodian 和 Nuclei 引擎，实现对主流公(私)有云资源的安全合规扫描和漏洞扫描。

Backstab

A tool to kill antimalware protected processes

Exploit-Development

osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Nebula

Nebula is a cloud C2 Framework, which at the moment offers reconnaissance, enumeration, exploitation, post exploitation on AWS, but still working to allow testing other Cloud Providers and DevOps Components.

IMAPLoginTester

A simple Python script that reads a text file with lots of e-mails and passwords, and tries to check if those credentials are valid by trying to login on IMAP servers.

CheeseTools

Self-developed tools for Lateral Movement/Code Execution

NamedPipePTH

Pass the Hash to a named pipe for token Impersonation

ManagedInjector

A C# DLL injection library

pyjarm

pyJARM is a library for doing JARM fingerprinting using python

jarm_randomizer

This tool was open sourced as part of JARM Randomizer: Evading JARM Fingerprinting for HiTB Amsterdam 2021.

hitb2021ams_deobfuscation

Carbuncle

Tool for interacting with outlook interop during red team engagements

MurMurHash

This little tool is to calculate a MurmurHash value of a favicon to hunt phishing websites on the Shodan platform.

lazyrecon

Wicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.