Interesting APT Report Collection And Some Special IOC

一个漏洞POC知识库

2023 HVV情报速递~

Indicators of compromise (IOCs) collected from public resources and categorized by Qi-AnXin.

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

一个红队知识仓库

Security-related Slide Presentation & Security Research Report（大安全各领域各公司各会议分享的PPT以及各类安全研究报告）

enemy SSH Telnet IoT botnet

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Linux privilege escalation auditing tool

Cyber Security ALL-IN-ONE Platform

OneForAll是一款功能强大的子域收集工具

个人收集的弱口令。

A Windows user-mode shellcode execution tool that demonstrates various techniques that malware uses

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 命令回显+一键getshell

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

SvnExploit支持SVN源代码泄露全版本Dump源码

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2…

基于实战沉淀下的各种弱口令字典

The Sandboxie application

分别用R3的0day与R0的0day来干掉杀毒软件

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With …

An easy ATT&CK-based Sysmon hunting tool, showing in Blackhat USA 2019 Arsenal

一款企业安全主动攻击型蜜罐钓鱼框架系统

Explore Indicators of Compromise Automatically

APT Malware Dataset Containing over 3,500 State-Sponsored Malware Samples

An open-source big data platform designed and optimized for the Internet of Things (IoT).