Spring漏洞综合利用工具

rmi打内存马工具，适用于目标用不了ldap的情况

ALL IN ONE Hacking Tool For Hackers

ALL IN ONE Hacking Tool For Hackers

PEN-300 collection to help you on your exam.

Just some things that have some cool uses

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

The ultimate WinRM shell for hacking/pentesting

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

Kerberos Resource-Based Constrained Delegation Attack from Outside using Impacket

A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic.

AoiAWD-专为比赛设计，便携性好，低权限运行的EDR系统。

对小米范webfinder http://www.cnblogs.com/SEC-fsq/p/5610981.html 进行了小修改

MOGWAI LABS JMX exploitation toolkit

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

各种漏洞poc、Exp的收集或编写

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exc…

platform for awd

Nmap扫描、漏洞利用脚本

Exploits developed by Mikael Kall

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

i`m a cat ~ find fish

s2-057 最新漏洞分析和EXP脚本