only-sunny

sunlogin_rce

向日葵 RCE

spyse.py

Python API wrapper and command-line client for the tools hosted on spyse.com.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Russian-APT-Tool-Matrix

A tool matrix for Russian APTs based on the Ransomware Tool Matrix

cvelistV5monitor

command

红队命令速查 是由棱角社区(Edge Forum) 整理的关于 Red Team 期间所常使用的一些基础命令。

hackerone-reports

Top disclosed reports from HackerOne

UESTC-Network-Security-Attack-and-Defense

UESTC电子科技大学网络安全攻防期末复习知识总结

MDUT

MDUT - Multiple Database Utilization Tools

certmitm

A tool for testing for certificate validation vulnerabilities of TLS connections made by a client device or an application.

ghidra

Ghidra is a software reverse engineering (SRE) framework

CVE-2024-6769

Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)

cyber-sec

个人安全手册【持续更新】

study

Java全栈工程师学习笔记；Spring、shiro、CAS、oauth2单点登录；cache 、Redis; web 安全及解决思路；redis、mq、quartz、docker；Docker各种组件实践等；mybatis、spring、spring boot实践；分布式锁；基于分库分表等等；Java full-stack engineer study notes; Spring, shiro, CAS, oauth2 single sign-on; cache, Redis; web security and solutions; redis, mq, quartz, docker; Docker various component practices, etc.;

waimei

免翻墙阅读纽约时报等海外媒体的中文文章 https://git.io/JJCxX

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

ChromeKatz

Dump cookies and credentials directly from Chrome/Edge process memory

Training-Malware-BC

Training-Malware-BC | Threat Hunting

kubeskoop

Network monitoring & diagnosis suite for Kubernetes

RD_Checklist

知道创宇研发技能表

shadow2

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Learning-EDR-and-EDR_Evasion

I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.

Z-Godzilla_ekp

哥斯拉webshell管理工具二次开发规避流量检测设备

blog

请文明观看blog，不要插入issues，谢谢

evil-winrm

The ultimate WinRM shell for hacking/pentesting

CVE-2024-21733

一个验证对CVE-2024-21733

fuso

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

GPU_ShellCode

CVE-2024-36401

Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit