Weiho

Expert
@we1h0

Life is short, try everything.

redteam-tips. 关于红队方面的学习资料

1.5k

web-sec-interview. Information Security (Web Security/Penetration Testing Direction) Interview Questions/Solutions 信息安全(Web安全/渗透测试方向)面试题/解题思路

478

SecurityManageFramwork. Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

430

ElegyRAT-C-Sharp. Open-Source Remote Administration Tool For Windows C# (Be Based On AsyncRAT)

163

awesome-java-security-checklist. awesome-java-security-checklist(关于Java安全方面,Java基础/审计/修复/设计/规范)

134

SiteServer-CMS-Remote-download-Getshell. SiteServer CMS 5.x远程模板下载Getshell漏洞

69

Security-Development-Lifecycle-Reference. Security Development LifeCycle Process (安全开发生命周期参考)

27

cobaltstrike-yara. 用于检测和分析 Cobalt Strike 的 代码和yara规则

4

redteam_vul. 红队作战中比较常遇到的一些重点系统漏洞整理。

4

Cloud-Bucket-Leak-Detection-Tools. 六大云存储，泄露利用检测工具

3

Talking-about-Intranet-Penetration. 漫谈内网渗透

3

JspWebShell. Java

3

IBOS-OA-Remote-Download-Getshell. IBOS OA 4.x /data/restore.php数据恢复工具远程下载Getshell漏洞

3

opencanary_web. 基于opencanary的蜜罐web服务端|The Web App of opencanary secondary development

2

Red-Team-Tools.

2

awesome-web-hacking. A list of web application security

2

Intranet_Penetration_Tips. 2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

2

Personal-article-summary.

2

awesome-hacking. A curated list of awesome Hacking tutorials, tools and resources

2

evildll. Malicious DLL (Reverse Shell) generator for DLL Hijacking

1

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

1

Reverse-IP. IP反查域名小脚本，用于信息收集和旁注

1

swarms. The Enterprise-Grade Production-Ready Multi-Agent Orchestration Framework Join our Community: https://discord.com/servers/agora-999382051935506503

1

commando-vm. Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

1

secbook. 信息安全从业者书单推荐

1
25
Apply