chuxin's repositories
damaihelper
支持大麦网,淘票票、缤玩岛等多个平台,演唱会演出抢票脚本
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
Pentest_Note
渗透测试常规操作记录
dirmap
An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具,功能将会强于DirBuster、Dirsearch、cansina、御剑。
bruteforce-database
Bruteforce database
MYExploit
OAExploit一款基于产品的一键扫描工具。
BypassAntiVirus
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
Awesome-CobaltStrike
cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources
POC-bomber
利用大量高威胁poc/exp快速获取目标权限,用于渗透和红队快速打点
fuzzDicts
Web Pentesting Fuzz 字典,一个就够了。
ImHex
A Hex Editor for Reverse Engineers, Programmers and people that value their eye sight when working at 3 AM.
SecBox
🖤 网络安全与渗透测试工具导航
Caesar
一个全新的敏感文件发现工具
dsdump
An improved nm + Objective-C & Swift class-dump
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
youtube-dl
Command-line program to download videos from YouTube.com and other video sites
Privilege-Escalation
This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.
gophish
Open-Source Phishing Toolkit
Awesome-Red-Teaming
List of Awesome Red Teaming Resources
The-Flask-Mega-Tutorial-zh
翻译自Miguel Grinberg的blog https://blog.miguelgrinberg.com 的2017年新版The Flask Mega-Tutorial教程
EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
Kernelhub
:palm_tree:Windows exploits提权漏洞合集,附带编译环境,演示GIF图,漏洞详细信息,可执行文件
pentest_compilation
Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios
oss-browser
OSS Browser 提供类似windows资源管理器功能。用户可以很方便的浏览文件,上传下载文件,支持断点续传等。
Pentest-tools-1
内网渗透工具
ARL
ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产,构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产,发现存在的薄弱点和攻击面。
Python-100-Days
Python - 100天从新手到大师
Dictionary-Of-Pentesting
渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目
Cheatsheet-God
Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet