Beast code in Giters

x51's starred repositories

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT57153 1903 262

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Language:GoMIT20084 234 2382

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

Language:DockerfileMIT17559 575 183

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

Language:PythonCC-BY-SA-4.011643 422 1094

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

GPL-3.08993 428 15

Quasar

Remote Administration Tool for Windows

Language:C#MIT8664 421 933

CrackMapExec

A swiss army knife for pentesting networks

Language:PythonBSD-2-Clause8371 307 558

sliver

Adversary Emulation Framework

Language:GoGPL-3.08295 149 731

pspy

Monitor linux processes without root permissions

Language:GoGPL-3.04878 52 12

AD-Attack-Defense

Attack and defend active directory using modern post exploitation adversary tradecraft activity

4393 223 5

Awesome-CobaltStrike

List of Awesome CobaltStrike Resources

3982 101 2

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐

Language:Shell2912 46 2

goHackTools

Hacker tools on Go (Golang)

Language:GoMIT2117 92 7

chunked-coding-converter

Burp suite 分块传输辅助插件

Language:JavaMIT1920 31 9

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

Language:Classic ASP1681 48 2

JNDI-Exploit-Kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

Language:JavaMIT892 190

Active_Directory_Advanced_Threat_Hunting

This repo is about Active Directory Advanced Threat Hunting

Language:PowerShell493 220