攻防演练中防守方重点知识点整理，旨在方便平时看看，也在需要的时候有一个miniwiki
☆32Jun 19, 2024Updated 2 years ago
Alternatives and similar repositories for BlueTeamReference
Users that are interested in BlueTeamReference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆33May 21, 2024Updated 2 years ago
- 浏览器数据清除脚本，可以检查浏览器中有没有存储特定网址的密码，然后实行数据的清除，主要是用于攻防演练中蓝队防止钓鱼获取浏览器密码。☆18Jul 8, 2024Updated last year
- 免杀☆12May 6, 2024Updated 2 years ago
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- PHP代码审计案例-1000PHP☆28Aug 20, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated 10 months ago
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆26Oct 29, 2024Updated last year
- 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选☆61Jun 12, 2025Updated last year
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- 一款在github上发现敏感信息的自动化收集工具☆229Apr 21, 2022Updated 4 years ago
- CVE-2020-10199 CVE-2020-10204 Python POC☆19Apr 7, 2020Updated 6 years ago
- 外网信息收集-思维导图☆17Jul 17, 2023Updated 2 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序 （`.wxapkg`）的智能反编译与敏感信息检索☆28Dec 12, 2025Updated 6 months ago
- 蓝凌OA的前后台密码的加解密工具☆96Dec 21, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Security Operation Tool Based on Large Language Models 基于大语言模型的安全运营工具☆23Mar 20, 2024Updated 2 years ago
- go语言免杀shellcode☆17Dec 31, 2021Updated 4 years ago
- CobaltStrike profile by 风起☆39Sep 29, 2021Updated 4 years ago
- 数据安全风险枚举框架（Data Security Risk Enumeration）☆57Mar 2, 2026Updated 4 months ago
- 内网横向利用工具，用于ssh wmiexec等常规服务，也可以当作一个数据库执行命令工具☆68May 15, 2023Updated 3 years ago
- Gscan二开版☆12Apr 11, 2024Updated 2 years ago
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 5 months ago
- 多人协同信息安全渗透测试报告编写/导出平台☆26Jun 18, 2024Updated 2 years ago
- 威胁情报播报☆48Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 基于ants框架设计的网络请求并发模型☆17Nov 27, 2023Updated 2 years ago
- 遇到过的弱口令☆10Nov 21, 2023Updated 2 years ago
- 用友NC-OA漏洞利用☆88Nov 25, 2021Updated 4 years ago
- ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆178May 17, 2024Updated 2 years ago
- Robust Encryption of Quantum Medical Images☆11May 20, 2019Updated 7 years ago
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 4 years ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated last year
- exp for useful vuln☆11Jul 9, 2021Updated 4 years ago
- 网络安全相关工具和文章链接总结☆124Mar 7, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE☆95Feb 12, 2025Updated last year
- burp手工检测fastjson辅助☆89Mar 4, 2024Updated 2 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 4 years ago
- Chrome-X 后渗透持久化与凭据监听☆38Jun 6, 2025Updated last year
- ☆14Jul 22, 2023Updated 2 years ago
- Godzilla java Decode,哥斯拉jsp(内存马)流量解密☆113Jan 20, 2022Updated 4 years ago
- 云原生安全漏洞收集☆17Jul 9, 2025Updated 11 months ago