sammylu

:palm_tree:Linux、macOS、Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

Language:CAGPL-3.0288100

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

Language:CMIT795400

Certipy

Tool for Active Directory Certificate Services enumeration and abuse

Language:PythonMIT224400

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Language:PowerShellNOASSERTION854000

fingerprint

各种工具指纹收集分享

Language:Ruby50400

xia_sql

xia SQL (瞎注) burp 插件，在每个参数后面填加一个单引号，两个单引号，一个简单的判断注入小插件。

Language:Java88300

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Language:GoMIT449200

ShuiZe_0x727

信息收集自动化工具

Language:Python365500

XSStrike

Most advanced XSS scanner.

Language:PythonGPL-3.01297100

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

Language:PascalMIT136600

uro

declutters url lists for crawling/pentesting

Language:PythonApache-2.0108000

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

Language:PythonMIT59500

learning-codeql

CodeQL Java 全网最全的中文学习资料

Language:CSS72000

CodeQL

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

141200

WanLi

方便红队人员对目标站点进行安全检测，快速获取资产。It is convenient for red team personnel to conduct security detection on the target site and quickly obtain assets.

Language:PythonMIT31800

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

Language:Go188600

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

Language:GoNOASSERTION1601900

Yasso

强大的内网渗透辅助工具集-让Yasso像风一样支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）

Language:Go155000

GoTokenTheft

Token stealing tool written by Go. Bypass Kaspersky,Defender,Avira, etc./Go 编写的 Token 窃取工具。免杀卡巴、Defender、小红伞等杀软

Language:Go16400

TideFinger

TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

Language:Python188500

airgeddon

This is a multi-use bash script for Linux systems to audit wireless networks.

Language:ShellGPL-3.0621500

Knowledge-Base

Knowledge Base 慢雾安全团队知识库

360000