redteam · GitHub Topics

#夺旗赛 (CTF) 和网络安全资源#该仓库整理了Web安全相关攻击示例代码和资源

pentest payload bypass Web app Hacking vulnerability bounty methodology privilege-escalation penetration-testing cheatsheet 安全 enumeration Bug Bounty redteam payloads Hacktoberfest

Python 63.77 k

5 天前

sherlock-project / sherlock

#夺旗赛 (CTF) 和网络安全资源#sherlock 是一个社工查询工具，能从上百个社交网站中检索指定 username 的账号是否存在

OSINT reconnaissance Linux 命令行界面 sherlock Python redteam 工具 information-gathering Hacktoberfest Cybersecurity cti forensics pentesting

Python 62.94 k

23 天前

bettercap / bettercap

#夺旗赛 (CTF) 和网络安全资源#The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

翻译 - 瑞士军刀可用于802.11，BLE和以太网侦察和MITM攻击。

password-sniffer mitm rogue-ap wifi Hacking 安全 spoofing proxy wifi-security deauthentication-attack dot11 network-attacks 监控 pmkid wpa2 redteam ble mousejack hid redteaming

JavaScript 17.34 k

9 天前

soxoj / maigret

#网络爬虫#Maigret 是一个OSINT用户名检查器。输入目标用户名，即可从各大社交网站采集该用户信息的工具。fork自sherlock开源项目

OSINT social-network identification Parsing socmint username-checker username-search sherlock username investigation namechecker Python Open Source Cybersecurity scraping osint-python redteam blueteam osint-framework

Python 14.87 k

6 天前

maurosoria / dirsearch

Web path scanner

翻译 - 网络路径扫描仪

fuzzer Fuzzing/Fuzz testing Python 安全 dirsearch Hacking pentesting penetration-testing Bug Bounty appsec wordlist hacking-tool Cybersecurity brute scanner enumeration pentest-tool red-teaming redteam

Python 12.64 k

20 天前

laramies / theHarvester

#夺旗赛 (CTF) 和网络安全资源#E-mails, subdomains and names Harvester - OSINT

翻译 - 电子邮件，子域和名称Harvester-OSINT

OSINT subdomain-enumeration redteam Reconnaissance blueteam discovery emails Python information-gathering reconnaissance

Python 12.18 k

9 小时前

GTFOBins / GTFOBins.github.io

#夺旗赛 (CTF) 和网络安全资源#精选的Unix二进制文件列表，可以用来绕过错误配置系统中的本地安全限制

post-exploitation Linux Unix bypass gtfobins binaries reverse-shell bind-shell exfiltration redteam blueteam

HTML 11.33 k

4 个月前

samratashok / nishang

#夺旗赛 (CTF) 和网络安全资源#Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

翻译 - Nishang-进攻性PowerShell，用于红队，渗透测试和进攻性安全。

PowerShell nishang 安全 red-team penetration-testing Cybersecurity Hacking redteam activedirectory

PowerShell 9.05 k

1 年前

edoardottt / awesome-hacker-search-engines

#搜索#有用的黑客搜索引擎合集，可用于渗透测试、漏洞评估、红队操作

Awesome Lists Hacking 搜索引擎 OSINT dns hacking-tools Exploit 安全 wifi-network Bug Bounty osint-tool vulnerabilities redteam redteaming Common Vulnerabilities and Exposures (CVE)Hacktoberfest threat-intelligence

Shell 8.4 k

1 个月前

LOLBAS-Project / LOLBAS

#夺旗赛 (CTF) 和网络安全资源#Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

lolbins redteam blueteam purpleteam dfir living-off-the-land

XSLT 7.35 k

25 天前

yeyintminthuhtut / Awesome-Red-Teaming

#夺旗赛 (CTF) 和网络安全资源#List of Awesome Red Teaming Resources

cobalt-strike phishing redteaming redteam uac

7.1 k

1 年前

A-poc / RedTeam-Tools

Tools and Techniques for Red Team / Penetration Testing

cheatsheet Cybersecurity Hacking penetration-testing red-team 安全 Linux Hackathon-Kit 工具 Windows enumeration payload pentest pentest-tools red-team-tools mitre-attack redteam

6.37 k

2 年前

yaklang / yakit

Yakit是基于yak语言开发的网络安全单兵工具，旨在打造一个覆盖渗透测试全流程的网络安全工具库。

redteam redteam-tools hacking-tools scanner burpsuite pentest Go blueteam Exploit Hacking 安全

TypeScript 6.23 k

1 天前

LasCC / HackTools

The all-in-one browser extension for offensive security professionals 🛠

翻译 - Web Pentester的多人红队扩展🛠

reverse-shell Hacking hack-tools Chrome 插件 Firefox 插件 hacktools payloads xss-payloads hack msfvenom metasploit hackbar cheatsheet purpleteam redteam Bug Bounty

TypeScript 5.99 k

2 个月前

ffffffff0x / 1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

markdown-article Linux 学习 pentest study 安全 collection blueteam redteam post-penetration ics-security writeup pentest-tool poc ctf Cybersecurity Hacking

C++ 5.45 k

9 个月前

madhuakula / kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

翻译 - Kubernetes山羊是一个“易受设计攻击的” Kubernetes集群。

Kubernetes vulnerable-app 安全 Hacking pentesting infrastructure cloud-security Docker container kubernetes-goat devsecops cloudsecurity kubernetes-security container-security owasp cloud-native blueteam redteam

HTML 4.65 k

1 个月前

mantvydasb / RedTeaming-Tactics-and-Techniques

#夺旗赛 (CTF) 和网络安全资源#Red Teaming Tactics and Techniques

翻译 - 红队战术与技巧

redteam pentesting redteaming redteam-infrastructure offensive-security oscp

PowerShell 4.18 k

7 个月前

zer0yu / Awesome-CobaltStrike

List of Awesome CobaltStrike Resources

cobalt-strike 安全 redteam

4.1 k

1 年前

lcvvvv / kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

redteam scanner bruteforce brute-force pentest Exploit red-team 安全 webscan fingerprint

Go 4.05 k

2 年前

t3l3machus / Villain

Villain is a high level stage 0/1 C2 framework that can handle multiple reverse TCP & HoaxShell-based shells, enhance their functionality with additional features (commands, utilities) and share them ...

Open Source pentest pentesting readteaming redteam-tools redteam Cybersecurity offensive-security c2 Hacking hacking-tool penetration-testing penetration-testing-tools

Python 3.94 k

2 个月前