wangxiaomo's repositories
0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
Awesome-CobaltStrike
CobaltStrike的相关资源汇总 / List of Awesome CobaltStrike Resources
BurpLoaderKeygen
Burp Suite Pro Loader & Keygen
bylibrary
白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
cf
云环境利用框架(Cloud exploitation framework)主要用来方便红队人员在获得 AK 的后续工作。
CobaltStr4.4
Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as "adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors". Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system.
FilelessPELoader
Loading Remote AES Encrypted PE in memory , Decrypted it and run it
GobypassAV-shellcode
使用go写的shellcode免杀加载器,免杀主流杀软,bypass火绒、360、def等
hyper-darkmatter
Darkmatter theme for Hyper, inspired by Sublime Darkmatter
nessus
nessus crack for docker
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
poc-hub
漏洞复现、漏洞检测
PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
reapoc
OpenSource Poc && Vulnerable-Target Storage Box.
Shellcode-Hide
This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)
sshuttle
Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.
sunlogin_rce
向日葵 RCE
ultimaste-nuclei-templates
极致攻防实验室 nuclei 检测 POC
username-anarchy
Username tools for penetration testing
Webshell_Generate
用于生成各类免杀webshell
xray_crack
适配mac和linux的crack xray启动
Youtube-Downloader
php youtube video streamer / downloader