lxh-123

dirsearch

Web path scanner

PHP_INCLUDE_TO_SHELL_CHAR_DICT

javassist

Java bytecode engineering toolkit

my-ctf-challenges

My CTF Challenges

patching

An Interactive Binary Patching Plugin for IDA Pro

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Fuzzing-Dicts

Web Security Dictionary

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

pentest-fuzz-dict

渗透测试工作中经常使用的字典集合

Dictionary-Of-Pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

RedTeam_BlueTeam_HW

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）和内存马查杀工具

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

AngelSword

Python3编写的CMS漏洞检测框架

redteam-arsenal

Some binaries/scripts that may be useful in red team/pentest exercises

Adinfo

域信息收集工具

impacket

Impacket is a collection of Python classes for working with network protocols.

IoT-vulhub

IoT 固件漏洞复现环境

Security-Learning

对于安全学习的一些总结，更新ing，期待 Fork & Star！

OSCP_study_guide

Notes of my OSCP study plan

CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

linux-exploit-suggester

Linux privilege escalation auditing tool

K8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

mysql-fake-server

MySQL Fake Server (纯Java实现，支持GUI版和命令行版，提供Dockerfile，支持多种常见JDBC利用)

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecBooks

安全类各家文库大乱斗

ThinkPHP-Vuln

关于ThinkPHP框架的历史漏洞分析集合

SSRFmap

Automatic SSRF fuzzer and exploitation tool

BypassAntiVirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。