loveh4ck

pentest_study

从零开始内网渗透学习

ADOffline

Imports an LDAP file from Active Directory for SQL based offline reconnisance

Altman

the webshell tool

AndroidMalwareEvaluatingTools

Evaluation tools for malware Android

Bugscan_exploits

CMS-Detection

CMS Detection javascript 以前留的

CMSmap

CMSmap is a python open source CMS (Content Management System) scanner that automates the process of detecting security flaws of the most popular CMSs.

DAws

Advanced Web Shell

discover

For use with Kali Linux. Custom bash scripts used to automate various pentesting tasks.

DSSS

Damn Small SQLi Scanner

eqgrp-free-file

Free sampling of files from the purported Equation Group hack.

exserial

Java Untrusted Deserialization Exploits Tools

fenghuangscanner_v1

fenghuangscanner_v3

GreenCMS

GreenCMS v2.x Based on ThinkPHP 3.2 Framwork

hexo_weibo_image

hexo使用新浪微博图床自动发布

LaZagne

Credentials recovery project

MacroShop

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

Mind-Map

各种安全相关思维导图整理收集

MyJSRat

This is JSRat.ps1 in Python

pentestdb

WEB渗透测试数据库

PocCollect

a plenty of poc based on python

pocscan

Will to be a niubility scan-framework

Potato

Windows privilege escalation through NTLM Relay and NBNS Spoofing

pxss

pyvulhunter

python audit tool 审计 注入 inject

smbexec

sqlmap

Automatic SQL injection and database takeover tool

WebLogicPasswordDecryptor

PowerShell script and Java code to decrypt WebLogic passwords

weeman

:tropical_fish: HTTP Server for phishing in Python