Stars
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
Dm2333 / PhishingExploit
Forked from demarica/PhishingExploitPhishingExploit
Dm2333 / rtfm
Forked from droberson/rtfmCheat sheet and notes inspired by the book RTFM - Red Team Field Manual
Dm2333 / hacker-roadmap
Forked from sundowndev/hacker-roadmap📌 A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.
windows-kernel-exploits Windows平台提权漏洞集合
Dm2333 / penetration
Forked from az0ne/Permeable渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
A POC Windows crypto-ransomware (Academic). Now Ransom:Win32/MauriCrypt.MK!MTB
apt365 / POC-T
Forked from Xyntax/POC-T渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
对 The Hacker Playbook 3 的翻译。
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetN…
Faster xss scanner,support reflected-xss and dom-xss
Open-Source Remote Administration Tool For Windows C# (RAT)
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。
Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.
Veil 3.1.X (Check version info in Veil at runtime)
bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)