pentest · GitHub Topics | GitHub 中文社区

#夺旗赛 (CTF) 和网络安全资源# 该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass web-application hacking vulnerability bounty methodology privilege-escalation penetration-testing

Python61.49 k

4 天前

hacker-roadmap

Raphaël@sundowndev

#新手入门# A collection of hacking tools, resources and references to practice ethical hacking.

翻译 - ：pushpin：面向业余笔测试人员的指南，以及一系列黑客工具，资源以及用于实践道德黑客，笔测试和网络安全的参考。

hacking hacking-tool penetration-testing roadmap frameworks hacktools pentest web-hacking exploitation post-exploitation

13.43 k

1 年前

social-analyzer

@qeeqbox

API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites

翻译 - 用于分析和查找300多个社交媒体网站上的个人资料的API和网络应用（检测定期更新）

osint social-media analyzer username profile reconnaissance pentest information-gathering pentesting social-analyzer

JavaScript11.74 k

1 个月前

Resources-for-Beginner-Bug-Bounty-Hunters

Ben Sadeghipour@nahamsec

A list of resources for those interested in getting started in bug bounties

翻译 - 那些有兴趣开始赏金的人的资源列表

bug-bounty-hunters hackers xss bug-bounty learn2hack hacking pentest web-security education ssrf

10.78 k

4 个月前

thc-hydra

van Hauser@vanhauser-thc

hydra

翻译 - 九头蛇

penetration-testing password-cracker network-security hydra thc pentesting pentest pentest-tool brute-force brute-force-passwords

C9.75 k

3 个月前

windows-kernel-exploits

SecWiki@SecWiki

windows-kernel-exploits Windows平台提权漏洞集合

windows kernel exploit tool collections pentest

C8.12 k

3 年前

objection

SensePost@sensepost

#安卓# 📱 objection - runtime mobile exploration

翻译 - 📱异议-运行时移动浏览

mobile pentest framework ios instrumentation frida security android

Python7.57 k

2 个月前

yakit

@yaklang

Yakit是基于yak语言开发的网络安全单兵工具，旨在打造一个覆盖渗透测试全流程的网络安全工具库。

redteam redteam-tools hacking-tools scanner burpsuite pentest golang blueteam exploit hacking

TypeScript6.68 k

5 小时前🇨🇳

feroxbuster

@epi052

A fast, simple, recursive content discovery tool written in Rust.

翻译 - 一种快速，简单，递归的内容发现工具，编写锈蚀。

web pentest pentesting-tool rust url-bruteforcer enumeration content-discovery hacktoberfest

Rust6 k

2 个月前

K8tools

@k8gege

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke...

exploit apt 0day poc getshell pentest hacking scanner privilege-escalation bypass

PowerShell5.82 k

1 年前

reconftw

@six2dez

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

翻译 - 简单的脚本进行全面侦察

bugbounty hacking recon pentest subdomain nuclei vulnerabilities scanner fuzzing osint

Shell5.75 k

9 小时前

DefaultCreds-cheat-sheet

@ihebski

#速查表 cheatsheets# One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

翻译 - 所有默认凭据的一个地方，可以帮助蓝色/红色团队成员活动查找具有默认密码password️的设备

infosec default-password pentesting bugbounty pentest credentials-gathering cheatsheet cybersecurity blueteam offensive-security

Python5.73 k

2 个月前

1earn

@ffffffff0x

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

markdown-article linux-learning pentest study security collection blueteam redteam post-penetration ics-security

C++5.34 k

6 个月前🇨🇳

linux-kernel-exploits

SecWiki@SecWiki

linux-kernel-exploits Linux平台提权漏洞集合

linux kernel exploit tool collection awesome pentest

C5.29 k

4 年前

Ladon

@k8gege

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchan...

scanner portscan pentest hacking security security-tools security-scanner poc getshell brute-force

PowerShell4.88 k

4 天前🇨🇳

evil-winrm

Hackplayers@Hackplayers

The ultimate WinRM shell for hacking/pentesting

翻译 - 终极WinRM Shell用于黑客入侵/喷枪攻击

winrm shell hacking pentest ruby pentesting pentesting-windows remote-management win-rm evil-winrm

Ruby4.55 k

25 天前

SocialFish

UndeadSec@UndeadSec

Phishing Tool & Information Collector

翻译 - 自动化的网络钓鱼工具和信息收集器

phishing python pentesting undead educational pentest

CSS4.12 k

25 天前

kscan

@lcvvvv

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

redteam scanner bruteforce brute-force pentest exploit red-team security webscan fingerprint

Go3.94 k

1 年前🇨🇳

Villain

@t3l3machus

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ...

open-source pentest pentesting readteaming redteam-tools redteam cybersecurity offensive-security c2 hacking

Python3.81 k

17 天前