zhutougg

RedteamStandard

LandrayDES

蓝凌OA的前后台密码的加解密工具

book_notes

Awesome-Intranet_pentest_tool

ZSXQFileDownload

知识星球，小密圈 附件批量下载

CommonsVulnExpTool

PopularVuln

Quasar-14.0

BypassShell

anti AV

Java-Rce-Echo

Java RCE 回显测试代码

JNDI

JNDI 注入利用工具

jsp-webshell

single file jsp webshell, work on jdk5+

Medusa

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件等功能，持续开发中

URLStatusCheck

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

APT-Hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

awesome-incident-response

A curated list of tools for incident response

CVE-2020-1947

CVE-2020-1947 poc

CVE-2020-2551

Weblogic IIOP CVE-2020-2551

CVE-2020-2552

CVE-2020-2551 poc exploit python Weblogic RCE with IIOP, power by 【劦久信安】 online check:

CVE-2021-3129

Laravel debug rce

Databasetools

一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接

DBJ

大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

EagleMonitorRAT

Remote Access Tool Written In C#

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

jackson-databind

General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)

Ninja

Open source C2 server created for stealth red team operations

OneForAll

OneForAll是一款功能强大的子域收集工具

RedTeaming-Tactics-and-Techniques

Red Teaming Tactics and Techniques

weird_proxies

Reverse proxies cheatsheet