zhl2008

zhl2008's starred repositories

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Language:GoApache-2.082771 1568 3442

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Language:PythonMIT35409 625 3323

LaZagne

Credentials recovery project

Language:PythonLGPL-3.09321 413 469

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

GPL-3.08756 423 15

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Language:PythonNOASSERTION8247 4690

Scanners-Box

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

8140 406 41

exploitdb

The legacy Exploit Database repository - New repo located at https://gitlab.com/exploit-database/exploitdb

GPL-2.07698 735 95

AhMyth-Android-RAT

Android Remote Administration Tool

Language:SmaliGPL-3.04333 390 251

EvilOSX

An evil RAT (Remote Administration Tool) for macOS / OS X.

Language:PythonGPL-3.02227 111 116

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

Language:CBSD-2-Clause1557 42 84

icmpsh

Simple reverse ICMP shell

Language:C1543 59 11

CursedChrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

Language:JavaScriptMIT1386 29 30

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

Language:C984 26 13

NetDiscovery

NetDiscovery 是一款基于 Vert.x、RxJava 2 等框架实现的通用爬虫框架/中间件。

Language:JavaApache-2.0639 52 15

Chromebackdoor is a PoC of pentest tool, this tool use a MITB technique for generate a windows executable ".exe" after launch run a malicious extension or script on most popular browsers, and send all DOM datas on command and control.

Language:CSS503 57 13

exploitdb-papers

The legacy Exploit Database paper repository - New repo located at https://gitlab.com/exploit-database/exploitdb-papers

GPL-2.0442 47 2

gadgetinspector

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

Language:JavaMIT434 90