YoungRichOG / Hosts_BoomView external linksLinks
通过hosts碰撞发现目标内部系统,扩大攻击面。
☆46Aug 11, 2021Updated 4 years ago
Alternatives and similar repositories for Hosts_Boom
Users that are interested in Hosts_Boom are comparing it to the libraries listed below
Sorting:
- 通过Whois信息发现更多与目标有关联的域名,扩大攻击面☆14Mar 9, 2022Updated 3 years ago
- 识别操作系统指纹☆20Jan 17, 2022Updated 4 years ago
- CVE-2021-36798: CobaltStrike < 4.4 Dos☆103Sep 26, 2021Updated 4 years ago
- 云函数扫描器实现代码☆167Apr 11, 2025Updated 10 months ago
- PrintNightMare LPE提权漏洞的CS 反射加载插件。开箱即用、通过内存加载、混淆加载的驱动名称来ByPass Defender/EDR。☆148Sep 1, 2021Updated 4 years ago
- fastjson不出网利用、c3p0☆255Jul 30, 2021Updated 4 years ago
- Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg☆135Sep 24, 2020Updated 5 years ago
- lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具☆44Jun 25, 2021Updated 4 years ago
- Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)☆10Feb 9, 2022Updated 4 years ago
- 多组件客户端☆74May 1, 2025Updated 9 months ago
- SpringBoot Actuator未授权自动化利用,支持信息泄漏/RCE☆232Dec 5, 2020Updated 5 years ago
- 卸载冰蝎内存马☆68Apr 13, 2021Updated 4 years ago
- TongdaOA 11.7 ~11.8 通达OA,任意用户登录+后台getshell☆86Jul 16, 2021Updated 4 years ago
- c/s网络准入平台☆20Nov 14, 2022Updated 3 years ago
- 一个简单的现代化公司域名使用规律预测及生成工具☆390Feb 24, 2022Updated 3 years ago
- 进行克隆用户、添加用户等账户防护安全检测的轻巧工具☆185Sep 3, 2021Updated 4 years ago
- 鹏 RocB - Java代码审计IDEA插件 SAST☆151Sep 16, 2021Updated 4 years ago
- 基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具☆327Oct 10, 2020Updated 5 years ago
- WINDOWS TELEMETRY权限维持☆258Jul 2, 2020Updated 5 years ago
- Windows活动目录中的LDAP信息收集工具☆234Oct 9, 2021Updated 4 years ago
- 检测域环境内,域机器的本地管理组成员是否存在弱口令和通用口令,对域用户的权限分配以及域内委派查询☆353Aug 10, 2021Updated 4 years ago
- 基于msf的后渗透协作平台☆219Aug 17, 2021Updated 4 years ago
- 🔎 crx-scouter.js can detect which Chrome extensions we are using quietly.☆147Oct 6, 2023Updated 2 years ago
- echoes(回响)是一款Github,红队监测工具☆14Mar 31, 2022Updated 3 years ago
- 沙箱IP、网络测绘ip、全网扫描ip等等收集☆128Nov 8, 2021Updated 4 years ago
- 扫描CobaltStrike的恶意IP☆31Apr 6, 2022Updated 3 years ago
- CobatStrike-Script, Beacon上线,微信实时推送!☆43Apr 21, 2020Updated 5 years ago
- Use Fofa、shodan、zoomeye、360quake to collect information(e.g:domain,IP,CMS,OS)同时调用Fofa、shodan、zoomeye、360quake四个网络空间测绘API完成红队信息收集☆71Nov 13, 2023Updated 2 years ago
- 用CSharp写的一款信息搜集工具,目前支持Navicat、TeamView、Xshell、SecureCRT产品的密码解密☆251Aug 26, 2020Updated 5 years ago
- 记录各语言、框架中危险的sink,个人代码审计、漏洞研究使用。☆117Dec 30, 2021Updated 4 years ago
- 通过JavaAgent与Javassist技术对JVM加载的类对象进行动态插桩,可以做一些破解、加密验证的绕过等操作☆116Jun 18, 2024Updated last year
- 利用agent hock指定的class,在jar运行周期内,用于跟踪被执行的方法,辅助做一些事情,比如挖洞啊☆125Jul 17, 2020Updated 5 years ago
- 备份文件扫描,并自动进行下载☆130Jul 26, 2023Updated 2 years ago
- 日志分析库,nuclei 的另一种用法☆33Aug 28, 2022Updated 3 years ago
- ☆232Jan 3, 2022Updated 4 years ago
- 提取DC日志,快速获取域用户对应IP地址☆308Mar 21, 2022Updated 3 years ago
- Xray 被动扫描管理☆59May 1, 2020Updated 5 years ago
- 利用链、漏洞检测工具☆373Jul 31, 2024Updated last year
- spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧☆753Apr 14, 2021Updated 4 years ago