.NET 执行命令的方法合集

A Stream Multiplexing Library for golang with least memory usage

JDNI在java高版本的利用工具

Geeker Admin，基于 Vue3.2、TypeScript、Vite2、Pinia、Element-Plus 开发的一套后台管理框架。

Rich Enhanced Shell History - Contextual shell history for zsh and bash

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

msImpersonate - User account impersonation written in pure Python3

Determine the running software version of a remote F5 BIG-IP management interface.

Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools

a CSS selector compiler & engine

openresty ssl tls 指纹识别

a low-interaction honeypot

In this repo you will find all the resources used in infosec it helps you to make your knowledge more perfect in this domain

Ronin is a Ruby platform for vulnerability research and exploit development. Ronin allows for the rapid development and distribution of code, Explo…

ShellCheck, a static analysis tool for shell scripts

AScanPort 高速、多线程、全端口、单IP扫描。

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. …

Open source version of Google Authenticator (except the Android app)

A front-end JavaScript toolkit for creating DNS rebinding attacks.

Promise based HTTP client for the browser and node.js

Finding XSS during recon

BurpSuite 插件

This is my own implementation of the Perun's Fart technique by Sektor7

Awesome list of techniques to achieve Remote Code Execution on various apps!

This script just implement a proxy over h2cSmuggler so you can navigate in your browser making requests to the back-end server.

调查取证 | 针对微信客户端的信息收集工具, 自动化提取本地PC所有的微信信息, 包括微信号, 手机号等

💻
Build terminal styled websites in minutes!

Awesome cloud enumerator

Hidden parameters discovery suite

👨‍💻
👩‍💻
Write Markdown. Together.

XLL Phishing Tradecraft

PowerShell MachineAccountQuota and DNS exploit tools

XLL Phishing Tradecraft

POC for leaking java version through file and ftp protocols

A DNS rebinding attack framework.

The kitchen sink of Python utility libraries for doing "stuff" in a functional way. Based on the Lo-Dash Javascript library.

Find credentials all over the place

使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。

A collection of modern/faster/saner alternatives to common unix commands.

😱
A curated list of amazingly awesome OSINT

Caddy/GoAccess data logger & converter (translates Caddy web server JSON logs to a format that GoAccess can ingest)

SSRF plugin for burp Automates SSRF Detection in all of the Request

Automated upstream mirror for libbpf stand-alone build.

后台admin前端模板，基于 layui 编写的最简洁、易用的后台框架模板。只需提供一个接口就直接初始化整个框架，无需复杂操作。

The universal proxy toolchain for Android

一个多功能的端口转发/端口复用工具，支持转发本地或远程地址的端口，支持正则表达式转发（实现端口复用）。

整理记录各个包管理器，系统镜像，以及常用软件的好用镜像，Thanks Mirror。 走过路过，如觉不错，麻烦点个赞
👆
🌟

利用链、漏洞检测工具

javascript embeddable / in-memory database

Set of EVTX samples (>170) mapped to MITRE Att@k tactic and techniques to measure your SIEM coverage or developed new use cases.

TaffyDB - an open source JavaScript Database for your browser

Burp Suite Attack Selector Plugin

Password attacks and MFA validation against various endpoints in Azure and Office 365