JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

PhishingExploit

Cheat sheet and notes inspired by the book RTFM - Red Team Field Manual

📌 A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.

windows-kernel-exploits Windows平台提权漏洞集合

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

ATTCK-PenTester-Book

Fast web fuzzer written in Go

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

A POC Windows crypto-ransomware (Academic). Now Ransom:Win32/MauriCrypt.MK!MTB

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

对 The Hacker Playbook 3 的翻译。

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…

Gitbook

Faster xss scanner,support reflected-xss and dom-xss

Open-Source Remote Administration Tool For Windows C# (RAT)

about CobaltStrike

OneForAll是一款功能强大的子域收集工具

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

Remote Administration Tool for Windows

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

Veil 3.1.X (Check version info in Veil at runtime)

Burpsuite-Plugins-Usage

关于我对外做过分享的议题PPT

记录自己写的工具和学习笔记

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

You Know, For WEB Fuzzing ! 日站用的字典。