Lists (4)
Stars
本程序为美国NSA的方程式工具包图形界面版，由ABC_123于2017年开始编写，仅用来扫描和验证MS17-010、MS09-050、MS08-067漏洞，并可协助管理员修复系统漏洞。
GodInfo 是一个功能全面的后渗透信息和凭据收集工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。
[WIP] 整理过去的分享，从零开始的Kubernetes攻防 🧐
TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.
Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.
Compiled Binaries for Ghostpack
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。
Homemade Aggressor scripts kit for Cobalt Strike
A comprehensive, intelligent, easy-to-use, and lightweight AI Infrastructure Vulnerability Assessment and MCP Server Security Analysis Tool.
CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some interfaces for users to call to manipulate the CrossC2 Beacon se…
使用AI大模型，一键生成高清故事短视频。Generate high-definition story short videos with one click using AI large models.
A exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt data_source info automatic.
A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well.
A little toolbox to play with Microsoft Kerberos in C