TimelineSec/ATTCK-Tools-library external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

TimelineSec/ATTCK-Tools-library

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/TimelineSec/ATTCK-Tools-library)

Close

TimelineSec / ATTCK-Tools-libraryView on GitHubMore

• External links
• Readme badge

TimelineSec ATT&CK 工具库

☆262Apr 14, 2023Updated 2 years ago

Alternatives and similar repositories for ATTCK-Tools-library

Users that are interested in ATTCK-Tools-library are comparing it to the libraries listed below

• QAX-A-Team / sharpwmi

  View on GitHub
  sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆716Aug 3, 2021Updated 4 years ago
• MountCloud / BehinderClientSource

  View on GitHub
  ❄️冰蝎客户端源码-V4.0.6🔞
  ☆939Jul 8, 2025Updated 7 months ago
• Ares-X / shiro-exploit

  View on GitHub
  Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload
  ☆897May 28, 2021Updated 4 years ago
• Rvn0xsy / PassDecode-jar

  View on GitHub
  帆软/致远密码解密工具
  ☆360Jul 29, 2021Updated 4 years ago
• wyzxxz / jndi_tool

  View on GitHub
  JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具
  ☆2,012May 21, 2024Updated last year
• LandGrey / ClassHound

  View on GitHub
  利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码
  ☆711May 10, 2021Updated 4 years ago
• threedr3am / ZhouYu

  View on GitHub
  （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）
  ☆615Dec 29, 2021Updated 4 years ago
• lengjibo / RedTeamTools

  View on GitHub
  记录自己编写、修改的部分工具
  ☆1,461Oct 19, 2025Updated 4 months ago
• sf197 / GetPwd

  View on GitHub
  用CSharp写的一款信息搜集工具，目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密
  ☆251Aug 26, 2020Updated 5 years ago
• DeEpinGh0st / Erebus

  View on GitHub
  CobaltStrike后渗透测试插件
  ☆1,554Oct 28, 2021Updated 4 years ago
• timwhitez / Cobalt-Strike-Aggressor-Scripts

  View on GitHub
  Cobalt Strike Aggressor 插件包
  ☆672Aug 31, 2021Updated 4 years ago
• yzddmr6 / As-Exploits

  View on GitHub
  中国蚁剑后渗透框架
  ☆939Jan 18, 2024Updated 2 years ago
• mrknow001 / aliyun-accesskey-Tools

  View on GitHub
  阿里云accesskey利用工具
  ☆1,225Apr 8, 2022Updated 3 years ago
• Veraxy00 / Shiro-EXP

  View on GitHub
  Apache Shiro 反序列化漏洞检测与利用工具，一键注入内存马
  ☆138Jan 20, 2021Updated 5 years ago
• b0bac / GetMail

  View on GitHub
  利用NTLM Hash读取Exchange邮件
  ☆441Jan 7, 2025Updated last year
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆763Jan 15, 2026Updated last month
• threedr3am / JSP-WebShells

  View on GitHub
  Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势
  ☆1,404Jan 18, 2022Updated 4 years ago
• r0eXpeR / redteam_vul

  View on GitHub
  红队作战中比较常遇到的一些重点系统漏洞整理。
  ☆2,522Jul 17, 2021Updated 4 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆965Aug 5, 2021Updated 4 years ago
• pandasec888 / taowu-cobalt_strike

  View on GitHub
  ☆1,821Nov 24, 2025Updated 3 months ago
• Adminisme / ServerScan

  View on GitHub
  ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。
  ☆1,635Jun 16, 2024Updated last year
• inbug-team / InScan

  View on GitHub
  边界打点后的自动化渗透工具
  ☆1,891Jul 19, 2021Updated 4 years ago
• Ershu1 / 2021_Hvv

  View on GitHub
  2021 hw
  ☆1,203Nov 14, 2023Updated 2 years ago
• 1n7erface / PocList

  View on GitHub
  Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-…
  ☆1,079May 11, 2023Updated 2 years ago
• zilong3033 / fastjsonScan

  View on GitHub
  fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。
  ☆124May 14, 2021Updated 4 years ago
• An0nySec / ShadowUser

  View on GitHub
  影子用户 克隆
  ☆232Dec 30, 2021Updated 4 years ago
• safe6Sec / Fastjson

  View on GitHub
  Fastjson姿势技巧集合
  ☆1,825Oct 20, 2023Updated 2 years ago
• dr0op / shiro-550-with-NoCC

  View on GitHub
  Shiro-550 不依赖CC链利用工具
  ☆451Jun 19, 2024Updated last year
• Adminisme / SharpRDPLog

  View on GitHub
  Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。
  ☆282Jun 23, 2024Updated last year
• 0-Xyao / Zero-box

  View on GitHub
  零组小工具
  ☆136Sep 24, 2021Updated 4 years ago
• jas502n / FinalShellDecodePass

  View on GitHub
  FinalShellDecodePass 加密解密
  ☆83Dec 1, 2021Updated 4 years ago
• Y4er / WebLogic-Shiro-shell

  View on GitHub
  WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell
  ☆535Aug 25, 2020Updated 5 years ago
• wgpsec / Automatic-permission-maintenance

  View on GitHub
  CobaltStrike 上线自动权限维持插件
  ☆185Jul 17, 2021Updated 4 years ago
• f0ng / log4j2burpscanner

  View on GitHub
  CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks
  ☆841Jun 13, 2023Updated 2 years ago
• depycode / fastjson-c3p0

  View on GitHub
  fastjson不出网利用、c3p0
  ☆255Jul 30, 2021Updated 4 years ago
• ybdt / post-hub

  View on GitHub
  Lateral movement
  ☆943Updated this week
• broken5 / WebAliveScan

  View on GitHub
  对目标域名进行快速的存活扫描、简单的指纹识别、目录扫描
  ☆915Dec 8, 2022Updated 3 years ago
• hayasec / 360SafeBrowsergetpass

  View on GitHub
  这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。
  ☆638Apr 4, 2021Updated 4 years ago
• r0eXpeR / fingerprint

  View on GitHub
  各种工具指纹收集分享
  ☆529Nov 3, 2021Updated 4 years ago