红队|域渗透重要漏洞汇总(持续更新)
☆291Dec 23, 2022Updated 3 years ago
Alternatives and similar repositories for AD_Pentest
Users that are interested in AD_Pentest are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 域控安全one for all☆738Sep 9, 2024Updated 2 years ago
- rmi打内存马工具，适用于目标用不了ldap的情况☆253Jul 12, 2023Updated 3 years ago
- Erfrp-frp二开-免杀与隐藏☆633Dec 4, 2022Updated 3 years ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,482Apr 25, 2024Updated 2 years ago
- 各种数据库的利用姿势☆1,030Jan 3, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 域内自动化信息搜集利用工具☆468Oct 24, 2023Updated 3 years ago
- 域信息收集工具☆419Sep 16, 2022Updated 4 years ago
- Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency☆1,051Oct 7, 2022Updated 4 years ago
- 解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命 令执行、回显命令执行、内存马注入☆775Jan 26, 2022Updated 4 years ago
- JNDI在java高版本的利用工具,FUZZ利用链☆606Aug 5, 2026Updated 2 months ago
- Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios | 实战场景较通用的 Java Rce 相关漏洞的利用方式☆548Mar 6, 2025Updated last year
- 分享几个直接可用的内存马，记录一下学习过程中看过的文章☆976Mar 23, 2022Updated 4 years ago
- Fastjson姿势技巧集合☆1,858Oct 20, 2023Updated 3 years ago
- dump lsass进程工具☆556Jul 20, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Mssql利用工具☆278Aug 7, 2023Updated 3 years ago
- 创建隐藏计划任务，权限维持，Bypass AV☆558Sep 1, 2021Updated 5 years ago
- WebSocket 内存马/Webshell，一种新型内存马/WebShell技术☆1,486Apr 10, 2023Updated 3 years ago
- 收 集内存马打入方式☆507May 20, 2022Updated 4 years ago
- WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）☆1,806Nov 1, 2023Updated 3 years ago
- 代码审计知识点整理-Java☆527Jun 15, 2020Updated 6 years ago
- Exchange 服务器安全性的辅助测试工具☆331Jul 21, 2023Updated 3 years ago
- 红蓝对抗：钓鱼演练资源汇总&备忘录☆1,193Nov 6, 2024Updated last year
- 一款支持自定义的 Java 回显载荷生成工具｜A customizable Java echo payload generation tool.☆464Jan 12, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 红队常用命令速查☆1,026Mar 17, 2026Updated 7 months ago
- 关于学习java安全的一些知识,正在学习中ing,欢迎fork and star☆787Jul 11, 2023Updated 3 years ago
- LSTAR - CobaltStrike 综合后渗透插件☆1,272Jan 30, 2022Updated 4 years ago
- 基于frp(0.44.0)二次开发，删除不必要功能，加密配置文件，修改流量以及文件特征☆311Aug 9, 2022Updated 4 years ago
- 一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.☆2,228Aug 21, 2025Updated last year
- 用于记录内网渗透(域渗透)学习 :-)☆1,256Nov 9, 2020Updated 5 years ago
- 内存加载shellcode绕过waf☆206Jul 25, 2022Updated 4 years ago
- 利用oss实现http转发/cobalt strike上线☆370Nov 26, 2022Updated 3 years ago
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆756Apr 14, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机☆428Jan 28, 2021Updated 5 years ago
- K8S安全攻防思维导图 | Docker安全攻防思维导图☆415Jun 22, 2022Updated 4 years ago
- 命令执行不回显但DNS协议出网的命令回显场景解决方案☆274Jan 10, 2023Updated 3 years ago
- 【两万字原创】零基础学fastjson漏洞（提高篇），公众号：追梦信安☆211Dec 7, 2023Updated 2 years ago
- 一款高性能 HTTP 内存代理 | 哥 斯拉插件 | readteam | 红队 | 内存马 | Suo5 | Godzilla | 正向代理☆297Aug 8, 2023Updated 3 years ago
- 获取服务器或域控登录日志☆278Sep 8, 2023Updated 3 years ago
- fastjson利用，支持tomcat、spring回显，哥斯拉内存马；回显利用链为dhcp、ibatis、c3p0。☆332Mar 15, 2022Updated 4 years ago