pentest · GitHub Topics | GitHub 中文社区

PayloadsAllTheThings

Swissky@swisskyrepo

#夺旗赛 (CTF) 和网络安全资源#该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass Web app Hacking vulnerability bounty methodology privilege-escalation penetration-testing

Python62.07 k

19 天前

hacker-roadmap存档

Raphaël@sundowndev

#新手入门#A collection of hacking tools, resources and references to practice ethical hacking.

翻译 - ：pushpin：面向业余笔测试人员的指南，以及一系列黑客工具，资源以及用于实践道德黑客，笔测试和网络安全的参考。

Hacking hacking-tool penetration-testing roadmap Framework hacktools pentest web-hacking exploitation post-exploitation

13.53 k

1 年前

social-analyzer

@qeeqbox

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

翻译 - 用于分析和查找300多个社交媒体网站上的个人资料的API和网络应用（检测定期更新）

OSINT social-media analyzer username profile reconnaissance pentest information-gathering pentesting social-analyzer

JavaScript11.84 k

2 个月前

Resources-for-Beginner-Bug-Bounty-Hunters

Ben Sadeghipour@nahamsec

A list of resources for those interested in getting started in bug bounties

翻译 - 那些有兴趣开始赏金的人的资源列表

bug-bounty-hunters hackers xss Bug Bounty learn2hack Hacking pentest web-security 教学 ssrf

10.84 k

5 个月前

thc-hydra

van Hauser@vanhauser-thc

hydra

翻译 - 九头蛇

penetration-testing password-cracker network-security hydra thc pentesting pentest pentest-tool brute-force brute-force-passwords bruteforce-attacks brute-force-attacks bruteforcing bruteforcer bruteforce password-cracking

C9.86 k

4 个月前

windows-kernel-exploits

SecWiki@SecWiki

windows-kernel-exploits Windows平台提权漏洞集合

Windows Kernel Exploit Tool collections pentest

C8.16 k

4 年前

objection

SensePost@sensepost

#安卓#📱 objection - runtime mobile exploration

翻译 - 📱异议-运行时移动浏览

Mobile pentest Framework iOS Instrumentation frida Security Android

Python7.65 k

3 个月前

yakit

@yaklang

Yakit是基于yak语言开发的网络安全单兵工具，旨在打造一个覆盖渗透测试全流程的网络安全工具库。

redteam redteam-tools hacking-tools scanner burpsuite pentest Go blueteam Exploit Hacking Security

TypeScript6.74 k

17 天前🇨🇳

feroxbuster

@epi052

A fast, simple, recursive content discovery tool written in Rust.

翻译 - 一种快速，简单，递归的内容发现工具，编写锈蚀。

Web pentest pentesting-tool Rust url-bruteforcer enumeration content-discovery Hacktoberfest

Rust6.05 k

3 个月前

K8tools

@k8gege

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke...

Exploit apt 0day poc getshell pentest Hacking scanner privilege-escalation bypass

PowerShell5.88 k

1 年前

reconftw

@six2dez

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

翻译 - 简单的脚本进行全面侦察

Bug Bounty Hacking Reconnaissance pentest subdomain nuclei vulnerabilities scanner Fuzzing/Fuzz testing OSINT

Shell5.81 k

5 天前

DefaultCreds-cheat-sheet

@ihebski

#速查表 cheatsheets#One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

翻译 - 所有默认凭据的一个地方，可以帮助蓝色/红色团队成员活动查找具有默认密码password️的设备

Cybersecurity default-password pentesting Bug Bounty pentest credentials-gathering cheatsheet blueteam offensive-security

Python5.79 k

3 个月前

WhatWeb

Andrew Horton@urbanadventurer

Next generation web scanner

翻译 - 下一代网络扫描仪

Security Web scanner Ruby penetration-testing kali-linux owasp penetration-testing-tools penetration-test Hacking hacking-tools network-security Reconnaissance appsec application-security pentesting pentesting-tools pentest web-hacking

Ruby5.61 k

5 个月前

1earn

@ffffffff0x

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

markdown-article Linux learning pentest study Security collection blueteam redteam post-penetration ics-security

C++5.38 k

7 个月前🇨🇳

linux-kernel-exploits

SecWiki@SecWiki

linux-kernel-exploits Linux平台提权漏洞集合

Linux Kernel Exploit Tool collection Awesome Lists pentest

C5.32 k

4 年前

Ladon

@k8gege

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchan...

scanner portscan pentest Hacking Security security-scanner poc getshell brute-force

PowerShell4.91 k

1 个月前🇨🇳

evil-winrm

Hackplayers@Hackplayers

The ultimate WinRM shell for hacking/pentesting

翻译 - 终极WinRM Shell用于黑客入侵/喷枪攻击

winrm Shell Hacking pentest Ruby pentesting pentesting-windows remote-management win-rm evil-winrm

Ruby4.61 k

21 天前

SocialFish

UndeadSec@UndeadSec

Phishing Tool & Information Collector

翻译 - 自动化的网络钓鱼工具和信息收集器

phishing Python pentesting undead educational pentest

CSS4.16 k

2 个月前

kscan

@lcvvvv

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

redteam scanner bruteforce brute-force pentest Exploit red-team Security webscan fingerprint

Go3.98 k

1 年前🇨🇳

Villain

@t3l3machus

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ...

Open Source pentest pentesting readteaming redteam-tools redteam Cybersecurity offensive-security c2 Hacking

Python3.85 k

2 个月前