利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

fofax is a command line query tool based on the API of https://fofa.info/, simple is the best!

This is a webshell open source project

Pre-Built Vulnerable Environments Based on Docker-Compose

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Various code snippets

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.

CTFs as you need them

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

php反序列化靶场，集合了常见的php反序列化漏洞——由这周末在做梦制作

A collection of various awesome lists for hackers, pentesters and security researchers

The fastest dork scanner written in Go.

For the time being, project will be published like this, more as test of my protector project.

This repo is just to teach owner a lesson, that life isnt Turkish soap drama and that there are consequences of behaving like soap actress ;)

This repo is just to teach owner a lesson, that life isnt Turkish soap drama and that there are consequences of behaving like soap actress ;)

Kerberos unconstrained delegation abuse toolkit

A powerful browser crawler for web vulnerability scanners

A tool to perform Kerberos pre-auth bruteforcing

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps v…

后渗透：代理、C2、免杀、横向、域渗透

视频课件和工具分享

基于Burp插件开发打造渗透测试自动化

网络信息安全从业者面试指南（持续补充各公司招聘面试题目和侧重点）

解决web及移动端H5数据加密Burp调试问题

Golang-Gin 框架写的免杀平台，内置分离、捆绑等多种BypassAV方式。

windows和linux基线检查，配套自动化检查脚本。纯手打。