reallys / pentest-domainLinks
域控 学习+攻击大纲
☆66Updated 6 years ago
Alternatives and similar repositories for pentest-domain
Users that are interested in pentest-domain are comparing it to the libraries listed below
Sorting:
- 若依后台定时任务一键利用☆17Updated 3 years ago
- 应对渗透中极限环境下命令回显 & 文件落地☆132Updated 3 years ago
- 窃取当前用户的ssh,sudo密码☆69Updated 2 years ago
- 一键出网探测工具☆73Updated 2 years ago
- Confluence未授权添加管理员用户(CVE-2023-22515)漏洞利用工具☆110Updated 2 years ago
- (批量化改造)sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。☆109Updated 5 years ago
- CVE-2021-44228,log4j2 burp插件 Java版本,dnslog选取了非dnslog.cn域名☆32Updated 4 years ago
- 组合利用泛微信息泄漏漏洞和任意用户登录漏洞,可获取全部loginId并测试登录☆59Updated 2 years ago
- 一个用于隐藏C2的、开箱即用的反向代理服务器。旨在省去繁琐的配置Nginx服务的过程。☆81Updated 3 years ago
- Nacos JRaft Hessian 反序列化 RCE EXP☆65Updated 2 years ago
- windows 添加管理员--Rust版本☆45Updated 3 years ago
- 泛微 eoffice10 前台 getshell☆59Updated 3 years ago
- 根据攻防以及域信息收集经验dump快而有用的域信息☆103Updated 2 years ago
- Zerologon自动化脚本☆96Updated 2 years ago
- ☆50Updated 2 years ago
- cobaltstrike 直接判断目标beacon存在的杀软☆48Updated 3 years ago
- nim快速免杀.net exe程序☆86Updated 3 years ago
- 批量获取域内机器桌面文件☆80Updated 3 years ago
- CS shellcode 加载器☆61Updated 4 years ago
- 利用RPC服务,批量探测内网Windows出网情况☆126Updated 3 years ago
- 蓝凌OA的前后台密码的加解密工具☆95Updated 5 years ago
- 无影脚 - 命令行下的日志文件处理工具☆52Updated 3 years ago
- 利用shiro反序列化注入冰蝎内存马☆37Updated 4 years ago
- 内网横向利用工具,用于ssh wmiexec等常规服务,也可以当作一个数据库执行命令工具☆68Updated 2 years ago
- 用于windows反弹shell的yaml-payload☆71Updated 4 years ago
- 基于ysoserial扩展命令执行结果回显,生成冰蝎内存马☆90Updated 2 years ago
- SpringBoot获取被星号脱敏的密码的明文☆58Updated 4 years ago
- golang写的批量对目标网站进行截图的小工具,适合目标资产比较多时,快速定位薄弱点。☆33Updated 3 years ago
- magicReform_cobaltstrike☆31Updated 3 years ago
- NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script☆88Updated 3 years ago