lsh4ck's repositories
Langzi_SRC_Safe_Cruise
LANGZI_SRC_安全巡航 是一款集成漏扫,验证,资产监控,自动复现并且生成结果表报的工具,实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。
Intranet_Penetration_Tips
2018年初整理的一些内网渗透TIPS,后面更新的慢,所以公开出来希望跟小伙伴们一起更新维护~
onlinetools
在线cms识别|旁站|c段|信息泄露|工控|系统|物联网安全|cms漏洞扫描|nmap端口扫描|子域名获取|待续..
self-linux-exp
linux-exp
self-windows-exp
windows-exp
app-env-docker
基于 Docker 的真实应用测试环境
archerysec
Open Source Vulnerability Assessment and Management helps developers and pentesters to perform scans and manage vulnerabilities.
awakening-conscience
利用公开的验证漏洞框架 编写批量测试脚本
awesome-cyber-security
[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.
bypass-firewalls-by-DNS-history
Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
cf
Cloud Exploitation Framework 云环境利用框架,方便安全人员在获得 AK 的后续工作
CVE-2019-5786
FileReader Exploit
EnumStrike
Cobalt Strike Aggressor script to automate host and domain enumeration.
gengzimingli
此为庚子年梳理的八字命理手册
metasploit-framework
Metasploit Framework
sec-tool-list
More than 16000 security tools, sorted by star count. Both in markdown and json format.
thinkphp-RCE-POC-Collection
thinkphp v5.x 远程代码执行漏洞-POC集合
WCE
This Python tool enables network node command and exfiltration while applying OPSEC to ensure the process is hidden by transmitting commands through window flags.