yaoyao-cool

RedTeamNotes

红队笔记

aksk_tool

AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS管理，RDS/DB管理，域名管理，添加RAM/CAM/IAM账号等

amass

In-depth attack surface mapping and asset discovery

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

icmp-tunnel

icmp tunnel demo

sliver

Adversary Emulation Framework

Awesome-CobaltStrike

List of Awesome CobaltStrike Resources

cf

云环境利用框架（Cloud exploitation framework）主要用来方便红队人员在获得 AK 的后续工作。

ddns-go

简单好用的DDNS。自动更新域名解析到公网IP(支持阿里云、腾讯云、Dnspod、Cloudflare、Callback、华为云、百度云、Porkbun、GoDaddy、Google Domain)

docker-php

PHP Docker 镜像，默认装好常用扩展

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

enum4linux

enum4Linux is a Linux alternative to enum.exe for enumerating data from Windows and Samba hosts

gost

GO Simple Tunnel - a simple tunnel written in golang

image

knock

Knock Subdomain Scan

laoyue

自动化监控赏金项目-定期收集资产,漏洞进行推送(现在可以稳定收菜,有问题issues我)

Microsoft-Office-For-MacOS

Installer & Activited Microsoft Office For MacOS

nbtscan

Scan networks searching for NetBIOS information

no_file_agent_mem_shell

无文件 agent内存马demo代码

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

rebuild

高度可配置化的企业管理系统！可免费商用！低代码/零代码快速搭建企业中台、OA办公自动化、CRM客户关系管理、WMS库存管理、SFA销售自动化、SCM供应链管理、HRM人力资源管理，TMS运输管理，甚至是 ERP 企业资源计划！

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC and MIPS architectures.

RunasCs

RunasCs - Csharp and open version of windows builtin runas.exe

safeline

长亭科技自研，基于业界领先的语义引擎检测技术，打造的简洁、易用的免费 WAF

sec-books-part1

:books: 网安类绝版图书

wesng

Windows Exploit Suggester - Next Generation

yaoyao-cool.github.io

ysoserial.net

Deserialization payload generator for a variety of .NET formatters