记录自己在内网渗透学习中的一些心得和技巧，不定期记录中:)
☆107Apr 11, 2022Updated 4 years ago
Alternatives and similar repositories for pentest-notes
Users that are interested in pentest-notes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 修改版FRP☆68Oct 8, 2021Updated 4 years ago
- 域渗透一条龙☆740Feb 16, 2022Updated 4 years ago
- 红队|域渗透重要漏洞汇总(持续更新)☆292Dec 23, 2022Updated 3 years ago
- 各种数据库的利用姿势☆1,034Jan 3, 2025Updated last year
- 代码审计知识点整理-Java☆530Jun 15, 2020Updated 6 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- 红队常用命令速查☆1,026Mar 17, 2026Updated 2 months ago
- Java应用的一些配置文件字典，来源于公开的字典与平时收集☆320Feb 1, 2024Updated 2 years ago
- 从零开始学免杀☆439Mar 30, 2022Updated 4 years ago
- 用于记录内网渗透(域渗透)学习 :-)☆1,249Nov 9, 2020Updated 5 years ago
- 一些自己常用的渗透字典☆234Aug 19, 2022Updated 3 years ago
- Redis 漏洞利用工具☆944Jan 26, 2025Updated last year
- 一些关于渗透测试的Tips☆613Dec 19, 2022Updated 3 years ago
- 域控安全one for all☆739Sep 9, 2024Updated last year
- 渗透辅助 BurpSuite 小插件☆235Nov 26, 2025Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 收集内存马打入方式☆508May 20, 2022Updated 4 years ago
- 帆软bi反序列化漏洞利用工具☆196Mar 23, 2024Updated 2 years ago
- 用友漏洞综合利用工具☆266Nov 9, 2024Updated last year
- 强化fscan的漏扫POC库☆470May 28, 2022Updated 4 years ago
- OAExploit一款基于产品的一键扫描工具。☆1,485Sep 20, 2022Updated 3 years ago
- AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…☆785Feb 13, 2025Updated last year
- 个人翻译/总结渗透测试思维导图☆29Jun 15, 2022Updated 3 years ago
- 主流供应商的一些攻击性漏洞汇总☆803Nov 8, 2021Updated 4 years ago
- 哥斯拉jsp/jspx免杀webshell生成器☆208Apr 28, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 各种工具指纹收集分享☆528Nov 3, 2021Updated 4 years ago
- 一个能快速开启和关闭匿名SMB共享的红队脚本☆174Apr 6, 2022Updated 4 years ago
- 一些常见字典☆173Aug 19, 2021Updated 4 years ago
- 一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件☆242Nov 25, 2022Updated 3 years ago
- 适用于Cobalt Strike的插件☆559May 30, 2021Updated 5 years ago
- 从内存中提取浏览器和Todesk用户凭证☆429Apr 13, 2025Updated last year
- 二开了MYExploit项目，其实也没改多少，就是新增了一些POC。☆15Jan 10, 2024Updated 2 years ago
- java代码审计学习笔记☆686Feb 24, 2020Updated 6 years ago
- 用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件☆211Apr 18, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks☆844Jun 13, 2023Updated 3 years ago
- EHole(棱洞)二开新增hunter接口、指纹、集成fscan的poc扫描功能☆98Dec 5, 2023Updated 2 years ago
- SpringScan 漏洞检测 Burp插件☆607Nov 14, 2023Updated 2 years ago
- 一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…☆1,475Apr 25, 2024Updated 2 years ago
- Java漏洞学习笔记 Deserialization Vulnerability☆943Jun 14, 2023Updated 3 years ago
- 金蝶星空云反序列化漏洞内存马☆53Mar 27, 2024Updated 2 years ago
- 个人学习Java安全的笔记☆134May 5, 2023Updated 3 years ago