ybdt/pentest-hub external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

ybdt/pentest-hub

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/ybdt/pentest-hub)

Close

ybdt / pentest-hubView on GitHubMore

• External links
• Readme badge

Penetration Testing

☆266Feb 27, 2026Updated last week

Alternatives and similar repositories for pentest-hub

Users that are interested in pentest-hub are comparing it to the libraries listed below

• Hel10-Web / Databasetools

  View on GitHub
  一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
  ☆860Aug 30, 2023Updated 2 years ago
• Ciyfly / microwaveo

  View on GitHub
  将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密
  ☆368Sep 8, 2022Updated 3 years ago
• qi4L / Unhooker-go

  View on GitHub
  EDR绕过demo
  ☆294Jan 14, 2024Updated 2 years ago
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,467Apr 25, 2024Updated last year
• novysodope / RMI_Inj_MemShell

  View on GitHub
  rmi打内存马工具，适用于目标用不了ldap的情况
  ☆253Jul 12, 2023Updated 2 years ago
• lele8 / SharpUserIP

  View on GitHub
  获取服务器或域控登录日志
  ☆276Sep 8, 2023Updated 2 years ago
• ybdt / post-hub

  View on GitHub
  Lateral movement
  ☆943Feb 28, 2026Updated last week
• wyzxxz / aksk_tool

  View on GitHub
  AK资源管理工具，阿里云/腾讯云/华为云/AWS/UCLOUD/京东云/百度云/七牛云存储/火山引擎 AccessKey AccessKeySecret，利用AK获取资源信息和操作资源，ECS/CVM/E2/UHOST/ECI/BCC执行命令，OSS/COS/S3/BOS…
  ☆779Feb 13, 2025Updated last year
• yuyan-sec / Doraemon

  View on GitHub
  渗透辅助 BurpSuite 小插件
  ☆232Nov 26, 2025Updated 3 months ago
• shmilylty / SharpHostInfo

  View on GitHub
  SharpHostInfo是一款快速探测内网主机信息工具（深信服深蓝实验室天威战队强力驱动）
  ☆626Dec 15, 2022Updated 3 years ago
• Ptkatz / OrcaC2

  View on GitHub
  OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。
  ☆676Dec 30, 2022Updated 3 years ago
• Goqi / Erfrp

  View on GitHub
  Erfrp-frp二开-免杀与隐藏
  ☆632Dec 4, 2022Updated 3 years ago
• xiao-zhu-zhu / noterce

  View on GitHub
  一种另辟蹊径的免杀执行系统命令的木马
  ☆492Dec 4, 2023Updated 2 years ago
• tib36 / PhishingBook

  View on GitHub
  红蓝对抗：钓鱼演练资源汇总&备忘录
  ☆1,158Nov 6, 2024Updated last year
• a1phaboy / FastjsonScan

  View on GitHub
  Fastjson扫描器，可识别版本、依赖库、autoType状态等。A tool to distinguish fastjson ,version and dependency
  ☆1,049Oct 7, 2022Updated 3 years ago
• czz1233 / GBByPass

  View on GitHub
  冰蝎 哥斯拉 WebShell bypass
  ☆763Jan 15, 2026Updated last month
• 9bie / oss-stinger

  View on GitHub
  利用oss实现http转发/cobalt strike上线
  ☆370Nov 26, 2022Updated 3 years ago
• 0x727 / UserRegEnum_0x727

  View on GitHub
  域内普通域用户权限查找域内所有计算机上登录的用户
  ☆151Apr 20, 2023Updated 2 years ago
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆309Aug 6, 2023Updated 2 years ago
• zhaoyumi / WeaverExploit_All

  View on GitHub
  泛微最近的漏洞利用工具（PS：2023）
  ☆481Dec 14, 2023Updated 2 years ago
• exp1orer / JNDI-Inject-Exploit

  View on GitHub
  解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入
  ☆769Jan 26, 2022Updated 4 years ago
• f0ng / selistener

  View on GitHub
  用于解决判断出网情况的问题，以http、ldap、rmi以及socket形式批量监听端口，在web界面进行结果查看
  ☆127Apr 17, 2023Updated 2 years ago
• yuyan-sec / RedisEXP

  View on GitHub
  Redis 漏洞利用工具
  ☆938Jan 26, 2025Updated last year
• lintstar / LSTAR

  View on GitHub
  LSTAR - CobaltStrike 综合后渗透插件
  ☆1,263Jan 30, 2022Updated 4 years ago
• bestspear / SharkOne

  View on GitHub
  Cobalt Strike 二开项目
  ☆185Feb 11, 2023Updated 3 years ago
• Ridter / PySQLTools

  View on GitHub
  Mssql利用工具
  ☆276Aug 7, 2023Updated 2 years ago
• seventeenman / CallBackDump

  View on GitHub
  dump lsass进程工具
  ☆561Jul 20, 2023Updated 2 years ago
• RowTeam / SharpExchangeKing

  View on GitHub
  Exchange 服务器安全性的辅助测试工具
  ☆331Jul 21, 2023Updated 2 years ago
• mabangde / SharpGetUserLoginIPRPC

  View on GitHub
  提取域控日志，支持远程提取
  ☆171Mar 17, 2025Updated 11 months ago
• TideSec / GoBypassAV

  View on GitHub
  整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。
  ☆1,166Aug 23, 2022Updated 3 years ago
• Avienma / DumpHash

  View on GitHub
  一款dump hash工具配合后渗透的利用
  ☆275Apr 21, 2023Updated 2 years ago
• HackingCost / AD_Pentest

  View on GitHub
  红队|域渗透重要漏洞汇总(持续更新)
  ☆290Dec 23, 2022Updated 3 years ago
• Daybr4ak / C2ReverseProxy

  View on GitHub
  一款可以在不出网的环境下进行反向代理及cs上线的工具
  ☆491Apr 26, 2023Updated 2 years ago
• Pizz33 / GobypassAV-shellcode

  View on GitHub
  shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软
  ☆920Apr 18, 2025Updated 10 months ago
• Ni4n / ShellGenerate

  View on GitHub
  哥斯拉jsp/jspx免杀webshell生成器
  ☆208Apr 28, 2023Updated 2 years ago
• snnxyss / In-Swor

  View on GitHub
  永久免杀加载器移步另一个项目https://github.com/snnxyss/new_in_swor 一个简单内网渗透工具免杀 目前免杀fscan,mimikatz,frp,elevationstation,bypassuac, 一键killAV 。请使用In-Swor…
  ☆390Dec 21, 2023Updated 2 years ago
• KimJun1010 / WeblogicTool

  View on GitHub
  WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）
  ☆1,773Nov 1, 2023Updated 2 years ago
• seventeenman / Forest

  View on GitHub
  基于frp(0.44.0)二次开发，删除不必要功能，加密配置文件，修改流量以及文件特征
  ☆314Aug 9, 2022Updated 3 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year