整理的一些hw前期准备工作 以及针对攻击者的溯源思路 水平较菜，如有错误或者遗漏的地方还请各位指正 参考资料较多 动态 IP 移动基站 代理池IP(谷歌、百度 是否有处于代理池C段) 国外扫描傀儡机（被标记时间普遍较久、扫描目标众多） 动态域名服务商（如花生壳、公云等） 域名反查whois邮箱为大批量域名注册者 普遍溯源难度较高 建议优先度降至最低 甚至舍弃
☆21Apr 3, 2021Updated 5 years ago
Alternatives and similar repositories for hw-
Users that are interested in hw- are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆34May 21, 2024Updated 2 years ago
- A byte code analyzer for finding deserialization gadget chains in Java applications☆12May 12, 2022Updated 4 years ago
- XXST-白加黑辅助挖掘工具，全程静默运行不影响正常使用☆17Apr 12, 2024Updated 2 years ago
- cve-2021-22986 f5 rce 漏洞批量检测 poc☆26Mar 27, 2021Updated 5 years ago
- 渗透测试/应急响应思维导图☆129Jun 25, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows操作系统版本检测工具，如果网络可达，Windows Server 2003 R2及其以上版本的 操作系统版本识别率理论上能达以100%☆11Mar 12, 2020Updated 6 years ago
- Java静态代码安全审计工具，使用JavaParser项目做语法分析，计划支持常见的Web漏洞与组件漏洞☆21Sep 20, 2021Updated 5 years ago
- 一个快速扫描dns域传输漏洞的脚本(ZTdns is a quick script to scan for DNS zone transfer vulnerabilities)☆14Apr 7, 2024Updated 2 years ago
- 一款功能强大的Chrome扩展，用于快速收集和分析域名相关信息，包括IP地址、公司信息、ICP备案信息和VirusTotal安全检测等。☆15Aug 4, 2026Updated 3 months ago
- edusrc报告转换☆16Feb 5, 2022Updated 4 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 5 years ago
- 脚本不能用了-给接口干收费了调用微步api实现自动化溯源，---脚本骗人的 目前只实现了 筛选高价值可溯源目标，肉鸡抓取功能☆67Aug 14, 2024Updated 2 years ago
- html/html5, css3, ,js综合训练之哔哩哔哩视频网多个页面☆11Jun 12, 2017Updated 9 years ago
- CobaltStrike profile by 风起☆38Sep 29, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 中国黑客列表☆22Mar 27, 2021Updated 5 years ago
- zoomeyeGUI☆24Jan 21, 2022Updated 4 years ago
- 应急响应所有流程☆84Jul 26, 2023Updated 3 years ago
- TFLAG:Towards Practical APT Detection via Deviation-Aware Learning on Temporal Provenance Graph (arXiv:2501.06997)☆13Nov 22, 2025Updated 11 months ago
- CodeQL分析闭源Jar包脚本，基于Apache Ant构建CodeQL数据库☆40Apr 16, 2026Updated 6 months ago
- 专注一站化解决渗透测试的信息收集任务，功能包括域名ip历史解析、nmap常见端口爆破、子域名信息收集、旁站信息收集、whois信息收集、网站架构分析、cms解析、备案信息收集、CDN信息解析、是否存在waf检测、后台寻找以及生成检测结果html报告表。☆41Nov 25, 2024Updated last year
- 泛微eoffice最新文件上传漏洞POC，基于2个接口自动检测☆16Dec 8, 2021Updated 4 years ago
- Automated mRemoteNG Decrypt Tool☆27Apr 14, 2024Updated 2 years ago
- 一款辅助安全研发在日常工作中渗透测试、安全研究、安全开发等工作的工具！ 程序支持Yaml格式的http请求模版☆57Oct 4, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- This is a Microsoft word templet for response letter. It will make your responses clear and formal.☆12Mar 31, 2018Updated 8 years ago
- Release of security datasets containing attack scripts and labeled logs☆14Oct 19, 2025Updated last year
- A node module similar to hystrix. Who caused riots - cut it!☆12Mar 14, 2018Updated 8 years ago
- 一个CTF+渗透测试工具框架,集成常见加解密，密码、编码转换，端口扫描，字符处理等功能☆72Nov 17, 2020Updated 5 years ago
- Golang 解析Wappalyzer指纹库,暂不支持识别☆13Oct 10, 2020Updated 6 years ago
- Exploit of the way update plugins works in Webmin, used to gain access to whatever Webmin is being run as (normally root). Written by mem…☆12Nov 15, 2019Updated 6 years ago
- Sightings Ecosystem gives cyber defenders visibility into what adversaries actually do in the wild. With your help, we are tracking MITRE…☆38May 28, 2025Updated last year
- 各类网络安全思维导图收藏☆20Feb 5, 2020Updated 6 years ago
- ☆11Sep 28, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 一个小轱辘，调用常用工具帮助红队快速自动化打点。☆32Jan 25, 2026Updated 9 months ago
- ☆13Updated this week
- CodeQL tutorial example code☆11Apr 15, 2025Updated last year
- Slides and link to recording for my defcon34 talk☆14Aug 19, 2026Updated 2 months ago
- ☆15Jul 11, 2021Updated 5 years ago
- Threat Intelligence Gathering 威胁情报收集，旨在提高蓝队拿到攻击 IP 后对其进行威胁情报信息收集的效率。☆846Aug 10, 2023Updated 3 years ago
- Crawling Papers in S&P/CCS/USENIX Security/NDSS according to keywords.☆15May 12, 2025Updated last year