Repositories list

• Prometheus

  Public
  Recon scripts for Red Team and Web blackbox auditing

  Python

  •

  Apache License 2.0

  •2•0•0•0•Updated Dec 3, 2024Dec 3, 2024

• snapinject_rs

  Public
  based on https://gitlab.com/ORCA000/snaploader

  Rust

  •

  MIT License

  •5•0•0•0•Updated Dec 2, 2024Dec 2, 2024

• class-obf

  Public
  一个 CLASS 文件混淆工具，支持方法名/字段名/参数名引用分析和重命名混淆方式，支持字符串提取/整型异或混淆/垃圾代码花指令混淆/等方式，支持方法和字段的隐藏，配置简单，容易上手

  Java

  •

  GNU General Public License v3.0

  •11•0•0•0•Updated Dec 2, 2024Dec 2, 2024

• process-inject-kit

  Public
  Port of Cobalt Strike's Process Inject Kit

  C++

  •16•0•0•0•Updated Dec 1, 2024Dec 1, 2024

• BucketVulTools

  Public
  Burpsuite存储桶配置不当漏洞检测插件

  Java

  •1•0•0•0•Updated Dec 1, 2024Dec 1, 2024

• SinkFinder-2

  Public
  闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，增加 LLM 大模型能力验证路径可达性，LLM 根据上下文代码环境给出该路径可信分数

  Java

  •9•0•0•0•Updated Dec 1, 2024Dec 1, 2024

• SinkFinder

  Public
  闭源系统半自动漏洞挖掘工具，针对 jar/war/zip 进行静态代码分析，增加 LLM 大模型能力验证路径可达性，LLM 根据上下文代码环境给出该路径可信分数

  Java

  •9•0•0•0•Updated Dec 1, 2024Dec 1, 2024

• simpleIAST

  Public
  simpleIAST- 基于污点追踪的灰盒漏洞扫描工具。

  Java

  •

  Apache License 2.0

  •4•0•0•0•Updated Nov 30, 2024Nov 30, 2024

• befree

  Public
  一款红队在信息收集时规避IP封禁的傻瓜式一键代理池，通过大量代理节点轮询的代理池工具

  C#

  •6•0•0•0•Updated Nov 27, 2024Nov 27, 2024

• MemShellParty

  Public
  JavaWeb 内存马开聚会 🎉

  Java

  •

  MIT License

  •28•0•0•0•Updated Nov 26, 2024Nov 26, 2024

• WinPwn

  Public
  Automation for internal Windows Penetrationtest / AD-Security

  PowerShell

  •

  BSD 3-Clause "New" or "Revised" License

  •523•0•0•0•Updated Nov 26, 2024Nov 26, 2024

• ShadowHound

  Public
  PowerShell scripts for alternative SharpHound enumeration, including users, groups, computers, and certificates, using the ActiveDirectory module (ADWS) or System.DirectoryServices class (LDAP).

  PowerShell

  •

  MIT License

  •21•0•0•0•Updated Nov 25, 2024Nov 25, 2024

• urlfinder-2

  Public
  A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.

  Go

  •

  MIT License

  •25•0•0•0•Updated Nov 25, 2024Nov 25, 2024

• pfish

  Public
  轻量级的无害化钓鱼~

  Go

  •20•1•0•0•Updated Nov 24, 2024Nov 24, 2024

• LuXunWorks

  Public
  判断某句话鲁迅是否说过

  Python

  •

  MIT License

  •1•0•0•0•Updated Nov 24, 2024Nov 24, 2024

• dicer

  Public
  简单的字典生成器。

  PHP

  •1•0•0•0•Updated Nov 21, 2024Nov 21, 2024

• Milkyway

  Public
  一款内网全方位扫描工具，具备高效的机器探活，端口探活，协议识别，漏洞扫描等功能

  4•0•0•0•Updated Nov 19, 2024Nov 19, 2024

• ShadowDumper

  Public
  Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advanced techniques to dump memory, allowing to access sensitive data in LSASS memory.

  C++

  •

  MIT License

  •58•0•0•0•Updated Nov 19, 2024Nov 19, 2024

• encrypt-labs

  Public
  前端加密对抗练习靶场，包含非对称加密、对称加密、加签以及禁止重放的测试场景，比如AES、DES、RSA，用于渗透测试练习

  PHP

  •21•1•0•0•Updated Nov 18, 2024Nov 18, 2024

• KillEverything

  Public
  Kill Everything AV/EDR

  C++

  •1•0•0•0•Updated Nov 18, 2024Nov 18, 2024

• DudeSuite

  Public
  Dude Suite Web Security Tools

  72•0•0•0•Updated Nov 18, 2024Nov 18, 2024

• chrome-coookie

  Public
  1•0•0•0•Updated Nov 17, 2024Nov 17, 2024

• RAT_Obfuscator

  Public
  Magical obfuscator, supports obfuscating EXE, BOF, and ShellCode.

  C++

  •12•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• TokenCert

  Public
  TokenCert

  C#

  •10•0•0•0•Updated Nov 15, 2024Nov 15, 2024

• Exploit-Street

  Public
  Complete list of LPE exploits for Windows (starting from 2023)

  C++

  •82•0•0•0•Updated Nov 14, 2024Nov 14, 2024

• obfus.h

  Public
  Macro-header for compile-time C obfuscation (tcc, win x86/x64)

  C

  •

  MIT License

  •76•0•0•0•Updated Nov 12, 2024Nov 12, 2024

• week-passwd

  Public
  FTP,SSH,MYSQL,MSSQL等弱口令爆破工具！

  29•1•0•0•Updated Nov 12, 2024Nov 12, 2024

• JavaSecLab

  Public
  ​ JavaSecLab是一款综合型Java漏洞平台，提供相关漏洞缺陷代码、修复代码、漏洞场景、审计SINK点、安全编码规范，覆盖多种漏洞场景，友好用户交互UI……

  JavaScript

  •

  Apache License 2.0

  •33•1•0•0•Updated Nov 12, 2024Nov 12, 2024

• KrakenMask

  Public
  Sleep obfuscation

  C++

  •27•0•0•0•Updated Nov 10, 2024Nov 10, 2024

• psobf-gen

  Public
  powershell 混淆 生成工具

  Go

  •3•0•0•0•Updated Nov 10, 2024Nov 10, 2024