整理的一些hw前期准备工作 以及针对攻击者的溯源思路 水平较菜,如有错误或者遗漏的地方还请各位指正 参考资料较多 动态 IP 移动基站 代理池IP(谷歌、百度 是否有处于代理池C段) 国外扫描傀儡机(被标记时间普遍较久、扫描目标众多) 动态域名服务商(如花生壳、公云等) 域名反查whois邮箱为大批量域名注册者 普遍溯源难度较高 建议优先度降至最低 甚至舍弃
☆21Apr 3, 2021Updated 5 years ago
Alternatives and similar repositories for hw-
Users that are interested in hw- are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 以蓝队为核心针对红队web指纹识别☆16Mar 28, 2025Updated last year
- 用于爬取谷歌关键词搜索的url,便于红队,src等快速提取☆33May 21, 2024Updated 2 years ago
- cve-2021-22986 f5 rce 漏洞批量检测 poc☆27Mar 27, 2021Updated 5 years ago
- XXST-白加黑辅助挖掘工具,全程静默运行不影响正常使用☆17Apr 12, 2024Updated 2 years ago
- 渗透测试/应急响应思维导图☆127Jun 25, 2021Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Windows操作系统版本检测工具,如果网络可达,Windows Server 2003 R2及其以上版本的 操作系统版本识别率理论上能达以100%☆11Mar 12, 2020Updated 6 years ago
- Java静态代码安全审计工具,使用JavaParser项目做语法分析,计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 4 years ago
- 一个快速扫描dns域传输漏洞的脚本(ZTdns is a quick script to scan for DNS zone transfer vulnerabilities)☆14Apr 7, 2024Updated 2 years ago
- 脚本不能用了-给接口干收费了调用微步api实现自动化溯源,---脚本骗人的 目前只实现了 筛选高价值可溯源目标,肉鸡抓取功能☆68Aug 14, 2024Updated last year
- 中国黑客列表☆23Mar 27, 2021Updated 5 years ago
- 应急响应所有流程☆84Jul 26, 2023Updated 2 years ago
- CobaltStrike profile by 风起☆39Sep 29, 2021Updated 4 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 4 years ago
- zoomeyeGUI☆24Jan 21, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 泛微eoffice最新文件上传漏洞POC,基于2个接口自动检测☆16Dec 8, 2021Updated 4 years ago
- 红队应急响应工具(支持麒麟系统)☆54Aug 13, 2025Updated 9 months ago
- Sightings Ecosystem gives cyber defenders visibility into what adversaries actually do in the wild. With your help, we are tracking MITRE…☆38May 28, 2025Updated 11 months ago
- 专注一站化解决渗透测试的信息收集任务,功能包括域名ip历史解析、nmap常见端口爆破、子域名信息收集、旁站信息收集、whois信息收集、网站架构分析、cms解析、备案信息收集、CDN信息解析、是否存在waf检测、后台寻找以及生成检测结果html报告表。☆41Nov 25, 2024Updated last year
- 一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具! 程序支持Yaml格式的http请求模版☆55Oct 4, 2022Updated 3 years ago
- ☆14Feb 12, 2024Updated 2 years ago
- 一个CTF+渗透测试工具框架,集成常见加解密,密码、编码转换,端口扫描,字符处理等功能☆71Nov 17, 2020Updated 5 years ago
- [TKDE] This repository is the official implementation of the TKDE 2025 "Fuzzy Granule Density-Based Outlier Detection with Multi-Scale Gr…☆16Apr 4, 2026Updated last month
- 各类网络安全思维导图收藏☆19Feb 5, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 一些简单的scripts,慢慢push☆15Apr 18, 2024Updated 2 years ago
- Crawling Papers in S&P/CCS/USENIX Security/NDSS according to keywords.☆14May 12, 2025Updated last year
- 一个常用编码 加解密的懒人工具,自动识别,尝试转换所有类型,包括html实体化,base64,base32,32位md5,16位md5,hash,\x,0x等十六进制格式,url编码...☆15Feb 1, 2022Updated 4 years ago
- 一个小轱辘,调用常用工具帮助红队快速自动化打点。☆32Jan 25, 2026Updated 4 months ago
- Learning JAVA for Security☆33Jun 9, 2022Updated 3 years ago
- Exploit of the way update plugins works in Webmin, used to gain access to whatever Webmin is being run as (normally root). Written by mem…☆12Nov 15, 2019Updated 6 years ago
- Threat Intelligence Gathering 威胁情报收集,旨在提高蓝队拿到攻击 IP 后对其进行威胁情报信息收集的效率。☆849Aug 10, 2023Updated 2 years ago
- ☆16Jul 11, 2021Updated 4 years ago
- 基于字节码的图融合的智能合约漏洞检测☆13Apr 23, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆15Mar 18, 2025Updated last year
- 适用于某EHR&HRM的加解密工具,可直接用于sqlmap☆25Jan 14, 2024Updated 2 years ago
- ☆18May 17, 2026Updated last week
- Golang 解析Wappalyzer指纹库,暂不支持识别☆13Oct 10, 2020Updated 5 years ago
- 基于 Chrome Manifest V3 的渗透测试辅助插件,用于快速发现页面输入点、评估 CSP 风险、嗅探潜在敏感资产、识别常见前端框架指纹,并内置常用编码转换工具,帮助进行合法合规的渗透测试与安全检查☆67Mar 2, 2026Updated 2 months ago
- Java安全,漏洞分析/挖掘/利用☆14Mar 14, 2023Updated 3 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆149Sep 16, 2021Updated 4 years ago