一个半自动化springboot打点工具，内置目前springboot所有漏洞

oss存储桶遍历漏洞利用脚本

助力红队成员一键生成免杀木马，使用rust实现 | Help Redteam members generate Evasive Anti-virus software Trojan

A Fundamental End-to-End Speech Recognition Toolkit and Open Source SOTA Pretrained Models, Supporting Speech Recognition, Voice Activity Detection, Text Post-processing etc.

API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

This workshop is designed to provide you with a solid understanding of IronPython, its integration with the .NET framework, and how it can be used to interact with other .NET languages.

A (partial) Python rewriting of PowerSploit's PowerView

对照实战场景梳理较通用的 Java Rce 相关漏洞的利用方式

This publication is a collection of various common attack scenarios on Azure Active Directory and how they can be mitigated or detected.

A C# utility for interacting with SCCM

This repository contains compatibility data for Web technologies as displayed on MDN

Decorated Syntax Tree - manipulate Go source with perfect fidelity.

业务风险枚举与规避知识（Business Risk Enumeration & Avoidance Kownledge）

An SMB library in Go

An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot saved to disk as a file.

本工具的定位是快速生成Java安全相关的Payload，如内存马、反序列化链、JNDI url、Fastjson等，动态生成相关Payload，并附带相应的文档。

Automation scripts to deploy Windows Event Forwarding, Sysmon, and custom audit policies in an Active Directory environment.

Ready to go Phishing Platform

非常专业的漏洞POC管理、团队授权化漏洞管理、漏洞验证利用、漏洞批量利用框架。

EasyPen is a GUI program which helps pentesters do information gathering, vulnerability scan and exploitation

SharpHostInfo是一款快速探测内网主机信息工具（深信服深蓝实验室天威战队强力驱动）

Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）

Cloud Exploitation Framework 云环境利用框架，方便红队人员在获得 AK 的后续工作

一个垃圾利用工具，半自动发包机器

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.

burp插件 用于web渗透注册时，快速生成需要的资料用来填写，资料包含：姓名、手机号、身份证、统一社会信用代码、组织机构代码、银行卡，以及各类web语言的hello world输出和生成弱口令字典。

内网渗透|红队工具|C#内存加载|cobaltstrike

Set of tools to analyze Windows sandboxes for exposed attack surface.

BLACKHAT USA2022 PDF Public