Real-jing
Follow
Starred repositories
Android Remote Administration Tool
A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.
Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).
本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。
强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）
Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)
IDE-style autocomplete for your existing terminal & shell
rabbitmask / 0day
Forked from pwntester/0day各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
Quickly discover exposed hosts on the internet using multiple search engines.
Pre-Built Vulnerable Environments Based on Docker-Compose
快速搭建各种漏洞环境(Various vulnerability environment)
🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
红/蓝队环境自动化部署工具 | Red/Blue team environment automation deployment tool
A protective and Low Level Shellcode Loader that defeats modern EDR systems.
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
HVV信息收集，优秀开源工具的整合，通过Zoomeye+ffuf+EHole+Xray+Rad进行信息收集
