轻量级的 Active Directory 枚举工具，用于收集域环境中的信息
☆88Mar 22, 2025Updated last year
Alternatives and similar repositories for GhostAD
Users that are interested in GhostAD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆13Feb 4, 2024Updated 2 years ago
- 二开了MYExploit项目，其实也没改多少，就是新增了一些POC。☆15Jan 10, 2024Updated 2 years ago
- 哥斯拉webshell管理工具的插件，用于连接websocket型webshell☆183Apr 17, 2024Updated 2 years ago
- 主要用于隐藏进程真实路径，进程带windows真签名☆119Oct 15, 2024Updated last year
- LC（List Cloud）是一个多云攻击面资产梳理工具☆641Oct 6, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- API Highlighter 是一个用于 BurpSuite 的插件，主要用于 web 应用迭代安全测试时高亮指定的新增接口，该插件最初用 Python 编写，现重构为 Java 版本。☆42Feb 19, 2025Updated last year
- 一个用于测试文件上传功能安全性的 Burp Suite 插件。通过 Intruder 模块自动生成各类绕过 payload，覆盖常见的文件上传限制场景。共1000+条payload☆597Dec 24, 2025Updated 4 months ago
- 一款渗透场景下的内网漏洞自动化扫描工具☆370Jun 8, 2025Updated 10 months ago
- AutoFuzz是一款安全测试的辅助型BurpSuite插件，主要用于自动识别请求中的参数，根据预设的payload逐个发包测试，从而提高测试效率。☆115Jun 2, 2025Updated 10 months ago
- 一款linux 内网渗透辅助工具☆77Jan 31, 2024Updated 2 years ago
- 内网资产收集、探测主机存活、端口扫描、域控定位、文件搜索、各种服务爆破（SSH、SMB、MsSQL等）、Socks代理，一键自动化+无文件落地扫描☆477Nov 20, 2024Updated last year
- c3p0 new gadget☆28Apr 1, 2025Updated last year
- 帆软bi反序列化漏洞利用工具☆56Jun 4, 2024Updated last year
- A socksv5 proxy tool Written by CLang. 一款纯C实现的轻量内网穿透工具，支持正向，反向socks5代理隧道的搭建，支持跨平台使用。☆470Mar 2, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 一个用友漏洞检测工具☆29May 15, 2024Updated last year
- vcenter图形化漏洞利用工具☆70Nov 17, 2024Updated last year
- A simple MobaXterm password extraction tool.☆100Aug 8, 2024Updated last year
- JeecgCracker 是一个专门针对 JeecgBoot 框架的密码爆破工具。☆29Oct 29, 2024Updated last year
- tsh多终端代理通信☆19Feb 26, 2025Updated last year
- 哥斯拉Hikvision综合安防后渗透插件，运行中心/web前台/MinIO 配置提取（解密）重置密码,还原密码。☆172Oct 8, 2024Updated last year
- 绕过杀软dumphash 离线读取☆150Nov 6, 2024Updated last year
- lineadd 渗透测试字典管理工具, 让字典管理生活轻松一点。Penetration test dictionary management tool, make dictionary management life a little easier.☆27Aug 19, 2023Updated 2 years ago
- 通过Dump内存读取ToDesk设备代码、连接密码☆243Sep 9, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 旨在以攻促防，针对Docker TCP socket的开源利用工具☆344Aug 27, 2024Updated last year
- Automated Hosting Information Hunting Tool - Windows 主机信息自动化狩猎工具☆552Apr 15, 2025Updated last year
- The first Computer Emergency Response (ARK) Tools for young people ;) 年轻人的第一款应急响应(ARK)工具 ；）☆672Oct 21, 2025Updated 6 months ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated last year
- GodInfo 是一个功能全面的后渗透信息和凭据收集 工具，旨在帮助安全测试人员在获得授权访问权限后，快速收集目标系统的信息和凭据。☆247Apr 29, 2025Updated last year
- 目标是成为当下最完善的API挖掘工具，实现自动提取响应敏感信息、URI信息，并且对URI进行自动|手动递归检查☆257Aug 16, 2025Updated 8 months ago
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆285Jul 17, 2025Updated 9 months ago
- Java代码审计手册，关注于漏洞挖掘而非利用【持续更新】☆200Nov 21, 2024Updated last year
- 帆软bi反序列化漏洞利用工具☆192Mar 23, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A powerful JNDI injection exploitation framework that supports RMI, LDAP and LDAPS protocols, including various bypass methods for high-v…☆581Feb 4, 2026Updated 2 months ago
- Basic Psexec clone, but in golang.☆17Jul 2, 2022Updated 3 years ago
- impacket-gui☆301Sep 4, 2023Updated 2 years ago
- 一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接☆864Aug 30, 2023Updated 2 years ago
- 一款轻量化可定制模板的邮件批量发送工具 | 可用于攻防钓鱼或其他邮件个性化的场景 | 可启动JavaFX或SpringWeb环境☆48Apr 2, 2026Updated 3 weeks ago
- Exchange 服务器安全性的辅助测试工具☆332Jul 21, 2023Updated 2 years ago
- SubDroid 是一款针对网络安全领域的自动化子域名枚举与安全扫描工具。它专为渗透测试人员、安全研究人员及开发者设计,旨在帮助快速发现潜在的安全问题。SubDroid 集成了多个强大的安全工具,通过简洁的命令行界面提供了高效的子域名扫描、DNS 查询、端口扫描、活跃性检测…☆26Apr 22, 2025Updated last year