Dm

ATTCK-PenTester-Book. ATTCK-PenTester-Book

penetration. 渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

SharpRDP. SharpRDP改编版

hacker-roadmap. :pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.

web-security. Web安全中比较好的文章

git-recipes. 🥡 Git recipes in Chinese by Zhongyi Tong. 高质量的Git中文教程.

PhishingExploit. PhishingExploit

Enterprise_-Security_tools. 企业安全建设中用到的开源or“免费”的工具

rtfm. Cheat sheet and notes inspired by the book RTFM - Red Team Field Manual

vulstudy. 使用docker快速搭建各大漏洞学习平台，目前可以一键搭建12个平台。

SQLInjectionWiki. 一个专注于聚合和记录各种SQL注入方法的wiki

OSEE. Collection of resources for my preparation to take the OSEE certification.

permeate. 一个用于参透测试演练的WEB系统,用于提升寻找网站能力,也可以用于web安全教学

doubi-1. 一个逗比写的各种逗比脚本~

Red-Teaming-Toolkit. A collection of open source and commercial tools that aid in red team operations.

codeparkshare. Python初学者（零基础学习Python、Python入门）书籍、视频、资料、社区推荐

net-creds. Sniffs sensitive data from interface or pcap

PublicMonitors. 对公网IP列表进行端口服务扫描，发现周期内的端口服务变化情况和弱口令安全风险

mail_fishing. 甲方安全工程师必备，内部钓鱼系统

openvpn-install. OpenVPN road warrior installer for Debian, Ubuntu and CentOS

demo. demo

windows-binary-tools. Various tools besides Msys2 that I've found useful to have available on windows. Create an issue if you have anything you want to add, want some binaries updated, or you think that some of them should be moved or re-moved.

awesome-windows-domain-hardening. A curated list of awesome Security Hardening techniques for Windows.

DB_BaseLine. 数据库基线检查工具

dnsrecon. DNS Enumeration Script

PowerShell. PowerShell scripts for Mick's IT Blogs

pentest-bookmarks-1. A collection of penetration testing related sites

linux_information. 自动化收集linux信息

Keylogger. A simple keylogger for Windows, Linux and Mac

baidu-netdisk-downloaderx. :zap: 百度网盘不限速下载器 BND，支持 Windows、Mac 和 Linux。

php_bugs. PHP代码审计分段讲解

RSSHub. 🍰 使用 RSS 连接全世界

BadMod. BadMod detect websites cms & auto exploit :D

AutoNSE. Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner

upload-fuzz-dic-builder. 上传漏洞fuzz字典生成脚本

ids_bypass. IDS Bypass tricks

security. Happy Hacker

abuse-ssl-bypass-waf. Bypassing WAF by abusing SSL/TLS Ciphers

checkO365. checkO365 is a tool to check if a target domain is using O365

maltrail. Malicious traffic detection system

Python-Backdoor. This program is an opensource, hidden and undetectable backdoor/reverse shell/RAT for Windows made in Python 3 which contains many features such as multi-client support and cross-platform server.

OSCPRepo. A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' Keepnote. Reconscan in scripts folder.

Worse-PDF. Turn a normal PDF file into malicious.Use to steal Net-NTLM Hashes from windows machines.

Awesome-Hacking-Resources. A collection of hacking / penetration testing resources to make you better!

SourceLeakHacker. 一个多线程WEB源码泄漏检测工具

architect-awesome. 后端架构师技术图谱

Base-Learning-for-Security-Offers. 404notfound的知识体系

lightsocks. ⚡️一个轻巧的网络混淆代理🌏

awesome-ninja-admins. :dizzy: A collection of awesome lists, manuals, blogs, hacks, one-liners and tools for Awesome Ninja Admins.

GhostTunnel. GhostTunnel is a covert backdoor transmission method that can be used in an isolated environment.

Bluto. DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking

xiao-webshell. a collection of webshell

Tunna. Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

iodine. Official git repo for iodine dns tunnel

DiscoverSubdomain. 前渗透信息探测工具集-子域名