Repositories list

• Milkyway

  Public
  一款内网全方位扫描工具，具备高效的机器探活，端口探活，协议识别，漏洞扫描等功能

  3•0•0•0•Updated Nov 19, 2024Nov 19, 2024

• ShadowDumper

  Public
  Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive data in LSASS memory.

  C++

  •

  MIT License

  •57•0•0•0•Updated Nov 19, 2024Nov 19, 2024

• encrypt-labs

  Public
  前端加密对抗练习靶场，包含非对称加密、对称加密、加签以及禁止重放的测试场景，比如AES、DES、RSA，用于渗透测试练习

  PHP

  •20•1•0•0•Updated Nov 18, 2024Nov 18, 2024

• KillEverything

  Public
  Kill Everything AV/EDR

  C++

  •1•0•0•0•Updated Nov 18, 2024Nov 18, 2024

• DudeSuite

  Public
  Dude Suite Web Security Tools

  72•0•0•0•Updated Nov 18, 2024Nov 18, 2024

• RAT_Obfuscator

  Public
  Magical obfuscator, supports obfuscating EXE, BOF, and ShellCode.

  C++

  •10•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• TokenCert

  Public
  TokenCert

  C#

  •10•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• Exploit-Street

  Public
  Complete list of LPE exploits for Windows (starting from 2023)

  C++

  •62•0•0•0•Updated Nov 14, 2024Nov 14, 2024

• obfus.h

  Public
  Macro-header for compile-time C obfuscation (tcc, win x86/x64)

  C

  •

  MIT License

  •76•0•0•0•Updated Nov 12, 2024Nov 12, 2024

• JavaSecLab

  Public
  ​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

  JavaScript

  •

  Apache License 2.0

  •31•1•0•0•Updated Nov 12, 2024Nov 12, 2024

• KrakenMask

  Public
  Sleep obfuscation

  C++

  •27•0•0•0•Updated Nov 10, 2024Nov 10, 2024

• CyberEdge

  Public
  互联网资产综合扫描/攻击面测绘

  Python

  •24•0•0•0•Updated Nov 6, 2024Nov 6, 2024

• testnet

  Public
  TestNet资产管理系统（资产管理|信息收集|暴露面管理|子域名扫描|C段扫描|端口扫描|漏洞扫描|Hunter|Fofa）

  Shell

  •32•0•0•0•Updated Nov 6, 2024Nov 6, 2024

• linker

  Public
  .NET8、p2p打洞(tcp+udp)，和组网(点对点，点对网，网对网)，和内网穿透，.NET8 NAT transfer, Virtual Private Network

  C#

  •

  GNU General Public License v2.0

  •54•0•0•0•Updated Nov 4, 2024Nov 4, 2024

• web-chains

  Public
  Web 版 Java Payload 生成与漏洞利用工具，提供 Java 反序列化、Hessian 1/2 反序列化等 Payload 生成，以及 JNDI Exploit、Fake Mysql Exploit、JRMPListener 等相关利用

  53•0•0•0•Updated Nov 2, 2024Nov 2, 2024

• AV-EDR-Lab-Environment-Setup

  Public
  AV/EDR Lab environment setup references to help in Malware development

  18•0•0•0•Updated Nov 1, 2024Nov 1, 2024

• cyberpanel

  Public
  Cyber Panel - The hosting control panel for OpenLiteSpeed

  JavaScript

  •

  GNU General Public License v3.0

  •616•0•0•0•Updated Oct 31, 2024Oct 31, 2024

• xxl-job-FLM

  Public
  xxl-job内存马

  Java

  •10•0•0•0•Updated Oct 31, 2024Oct 31, 2024

• T-1

  Public
  T-1 is a shellcode loader that leverages ML techniques to detect VM environments

  C++

  •

  MIT License

  •3•0•0•0•Updated Oct 30, 2024Oct 30, 2024

• EasyContral

  Public
  C#基于HTTP实现带GUI的简单远程控制程序

  C#

  •3•0•0•0•Updated Oct 30, 2024Oct 30, 2024

• MSSprinkler

  Public
  MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts from an external perspective. It employs a 'low-and-slow' approach to avoid locking out accounts, and provides verbose information related to accounts and tenant information.

  PowerShell

  •

  MIT License

  •6•0•0•0•Updated Oct 27, 2024Oct 27, 2024

• SecurityInspector

  Public
  一款代码审计辅助插件

  HTML

  •20•0•0•0•Updated Oct 24, 2024Oct 24, 2024

• Athena

  Public
  极简的多资产回测框架

  Jupyter Notebook

  •2•0•0•0•Updated Oct 24, 2024Oct 24, 2024

• loxs

  Public
  best tool for finding SQLi,XSS,LFi,OpenRedirect

  Python

  •152•0•0•0•Updated Oct 23, 2024Oct 23, 2024

• Secure_Stager

  Public
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution

  C

  •25•0•0•0•Updated Oct 21, 2024Oct 21, 2024

• Rust_Beacon

  Public
  使用 rust 实现的 CobaltStrike 的 beacon

  Rust

  •17•0•0•0•Updated Oct 20, 2024Oct 20, 2024

• Dumphash-C-

  Public
  绕过杀软dumphash 离线读取

  C++

  •16•0•0•0•Updated Oct 19, 2024Oct 19, 2024

• BypassAV-2-1

  Public
  一款基于PE Patch技术的后渗透免杀工具，支持32位和64位

  C++

  •19•0•0•0•Updated Oct 18, 2024Oct 18, 2024

• riverPass

  Public
  riverPass 是一个用Go编写的瑞数WAF绕过工具。它利用了WebSocket协议，将请求发送的自身浏览器中，从而绕过了瑞数WAF的检测。

  Go

  •

  MIT License

  •15•0•0•0•Updated Oct 18, 2024Oct 18, 2024

• Ghost

  Public
  Evasive shellcode loader

  C++

  •49•0•0•0•Updated Oct 15, 2024Oct 15, 2024