内网穿透(跨平台)

Useful PowerShell scripts

python3写的综合扫描工具，主要用来存活验证，敏感文件探测(目录扫描/js泄露接口/html注释泄露)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

CTF Training 经典赛题复现环境

Collection of CTF Web challenges I made

从零开始内网渗透学习

Enumeration sub domains(枚举子域名)

OneForAll是一款功能强大的子域收集工具

This is JSRat.ps1 in Python

Web path scanner

“冰蝎”动态二进制加密网站管理客户端

一个包含php,java,python,C#等各种语言版本的XXE漏洞Demo

Kali Windows

A Tool for Domain Flyovers

XSS spider - 66/66 wavsep XSS detected

Takes a URL and checks the system for the tilde enum vuln and then find the files.

SecQuanCknife

Reddit XSS Gather Tool

免杀webshell无限生成工具

CMS漏洞测试用例集合

The Browser Exploitation Framework Project

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strin…

Cknife

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PowerSploit - A PowerShell Post-Exploitation Framework

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authenticat…

Impacket is a collection of Python classes for working with network protocols.

Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

MSSQL注入提权,bypass的一些总结