shadowdiscover

ctf-tools

Some setup scripts for security research tools.

CVE-2016-5195

A CVE-2016-5195 exploit example.

CTFDefense

Some tools for CTF off line

poodle-PoC

:poodle: Poodle (Padding Oracle On Downgraded Legacy Encryption) attack CVE-2014-3566 :poodle:

chinese-dos-games

🎮 Chinese DOS games collections.

100-Days-Of-ML-Code

100-Days-Of-ML-Code中文版

PyGithub

Typed interactions with the GitHub API v3

redteam-notebook

Collection of commands, tips and tricks and references I found useful during preparation for OSCP exam.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web-CTF-Cheatsheet

Web CTF CheatSheet 🐈

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Wiki

Record my reading books and notes.

deepin-wine-ubuntu

Deepin Wine for Ubuntu/Debian

DPlayer

:lollipop: Wow, such a lovely HTML5 danmaku video player

Persistent

discover-flask

Full Stack Web Development with Flask.

WebShell

Webshell && Backdoor Collection

CHAOS

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

CMSeeK

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

RTF_11882_0802

PoC for CVE-2018-0802 And CVE-2017-11882

EventCleaner

A tool mainly to erase specified records from Windows event logs, with additional functionalities.

Remote-Desktop-Caching-

This tool allows one to recover old RDP (mstsc) session information in the form of broken PNG files. These PNG files allows Red Team member to extract juicy information such as LAPS passwords or any sensitive information on the screen. Blue Team member can reconstruct PNG files to see what an attacker did on a compromised host. It is extremely useful for a forensics team to extract timestamps after an attack on a host to collect evidences and perform further analysis.

Termite

Tool for tunnel (Version 2)

PacketStorm-Exploits

Collection of publicly available exploits from Packetstorm

MalAnalyzer

基于docker虚拟化的恶意代码沙箱

Mailget

通过脉脉用户猜测企业邮箱

Blasting_dictionary

爆破字典

Benchmarks

常用服务器、数据库、中间件安全配置基线 - 基本包括了所有的操作系统、数据库、中间件、网络设备、浏览器，安卓、IOS、云的安全配置 For benchmarks.cisecurity.org

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers