RoseSecurity / Red-Teaming-TTPs

During the exploitation phase of a pen test or ethical hacking engagement, you will ultimately need to try to cause code to run on target system computers. Here is a simple way to evade anti-virus sof...

#网络爬虫#ScrapPY is a Python utility for scraping manuals, documents, and other sensitive PDFs to generate wordlists that can be utilized by offensive security tools to perform brute force, forced browsing, an...

Generates a flood of Router Advertisements (RA) with random source MAC addresses and IPv6 prefixes. Computers, which have stateless autoconfiguration enabled by default (every major OS), will start to...

A Proof-of-Concept tool utilizing open DNS resolvers to produce an amplification attack against web servers. Using Shodan APIs and native Linux commands, this tool is in development to cripple web ser...

#Awesome#A collection of awesome penetration testing resources, tools and other shiny things

开源网络威胁情报平台OpenCTI

Clarity AI | AI Image Upscaler & Enhancer - free and open-source Magnific Alternative

Open Source Vulnerability Management Platform

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

#夺旗赛 (CTF) 和网络安全资源#OWASP Juice Shop：可能是最不安全的现代化，复杂的网站。用于漏洞学习目的，包含多种热门安全漏洞。

Docker 中运行 Windows 操作系统

Hunt for security weaknesses in Kubernetes clusters

#Awesome#🔓😎 A curated list of awesome guides, tools, and other resources related to the security and compromise of locks, safes, and keys.

#supply #chain #attack #detection

#学习与技能提升#免费公共 API 集合

The Network Execution Tool

metasploit 全球使用最多的渗透测试框架

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

Automated Mass Exploiter

Adversary Emulation Framework

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

A Tool for Domain Flyovers

#安全#sqlmap 是一个开源的渗透测试工具，可以用来自动化的检测，利用SQL注入漏洞，获取数据库服务器的权限。它具有功能强大的检测引擎,针对各种不同类型数据库的渗透测试的功能选项，包括获取数据库中存储的数据，访问操作系统文件甚至可以通过带外数据连接的方式执行操作系统命令。