startagain2016's repositories
adPEAS
Powershell tool to automate Active Directory enumeration.
arsenal
Arsenal is just a quick inventory and launcher for hacking programs
ASM-Guard
Packer utility for compressing and complicating reversing compiled native code (native files), protecting resources, adding DRM, and packing into an optimized loader.
BounceBack
↕️🤫 Stealth redirector for your red team operation security
CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability
Microsoft-Outlook-Remote-Code-Execution-Vulnerability
CVE-2024-23897
CVE-2024-23897 - Jenkins 任意文件读取 利用工具
CVS
Powerful and customizable vulnerability scanner based on VDSL, which can replace Nessus or Nuclei, etc. 万象通用漏洞扫描器,支持强大的PoC脚本语言、先进易用的PoC开发和调试IDE、现代化无需等待OOB服务器。可替代Nessus和Nuclei等漏洞扫描产品。
Ekko
Sleep Obfuscation
Exp-Tools
一款集成高危漏洞exp的实用性工具
FastTunnel
expose a local server to the internet. 高性能跨平台的内网穿透解决方案 远程内网计算机 域名访问内网站点 反向代理内网服务 端口转发 http代理
FindAll
一款自动化分析网络安全应急响应工具
FrameVul
POC集合,框架nday漏洞利用
GeminiProChat
Minimal web UI for GeminiPro.
HiddenDesktop
HVNC for Cobalt Strike
JenkinsExploit-GUI
一款Jenkins的综合漏洞利用工具
mobsfscan
mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.
mssql-command-tool
xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作,上传,job等相应操作。
nb
CLI and local web plain text note‑taking, bookmarking, and archiving with linking, tagging, filtering, search, Git versioning & syncing, Pandoc conversion, + more, in a single portable script.
nim-shell
Reverse shell that can bypass windows defender detection
NimExec
Fileless Command Execution for Lateral Movement in Nim
NucleiTP
自动整合全网Nuclei的漏洞POC,实时同步更新最新POC!
pocsuite3
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
PoolParty
A set of fully-undetectable process injection techniques abusing Windows Thread Pools
S-inject
支持x86/x64的DLL和Shellcode 的Windows注入的免杀工具
seeker
Accurately Locate Smartphones using Social Engineering
SqlmapXPlus
SqlmapXPlus 基于 Sqlmap,对经典的数据库漏洞利用工具进行二开!
teamide
Team IDE 工具 集成MySql、Oracle、金仓、达梦、神通等数据库、SSH、FTP、Redis、Zookeeper、Kafka、Elasticsearch等管理工具
trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
vulnerability-Checklist
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter