Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Gitbook

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

github泄露扫描系统

Attack Surface Management Platform

Uses Empire's (https://github.com/BC-SECURITY/Empire) RESTful API to automate gaining Domain and/or Enterprise Admin rights in Active Directory environments using some of the most common offensive …

a webshell resides in the memory of java web server

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB

从零开始内网渗透学习

Cknife

Apache Tomcat auto WAR deployment & pwning penetration testing tool.

针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具

Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)

CTF framework and exploit development library

爆破字典

收集各种各样的exp

Web Application Security Scanner Framework

Knowledge Base 慢雾安全团队知识库

ANTLR v4 grammar-based test generator

ANTLR v4 grammar-based test generator

Infection Monkey - An open-source adversary emulation platform

WEB SERVICE SECURITY ASSESSMENT TOOL

Steal Net-NTLM Hash using Bad-PDF

已不再维护

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

[ceased maintenance] An open source alternative to burp suite written in Go.

《The Way to Go》中文译本，中文正式名《Go 入门指南》

Golang for Security Professionals

a fast domain brute tool