Starred repositories
CloudMoe Windows 10/11 Activation Toolkit get digital license, the best open source Win 10/11 activator in GitHub. GitHub 上最棒的开源 Win10/Win11 数字权利(数字许可证)激活工具!
python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。
A full-fledged msfrpc library for Metasploit framework.
cSploit - The most complete and advanced IT security professional toolkit on Android.
2018年初整理的一些内网渗透TIPS,后面更新的慢,所以整理出来希望跟小伙伴们一起更新维护~
一款用于资产探测的端口扫描工具。整合了masscan和nmap两款扫描器,masscan扫描端口,nmap扫描端口对应服务,二者结合起来实现了又快又好地扫描。
A platform for building proxies to bypass network restrictions.
Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.
对 The Hacker Playbook 3 的翻译。
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Pholcus is a distributed high-concurrency crawler software written in pure golang
awesome list of browser exploitation tutorials
Use React, Redux, Immutable to code Tetris. 🎮
A tool to dump the login password from the current linux user
A little tool to play with Windows security
PowerSploit - A PowerShell Post-Exploitation Framework
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
NoneNotNull / reGeorg
Forked from sensepost/reGeorgThe successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.