攻防演练中防守方重点知识点整理，旨在方便平时看看，也在需要的时候有一个miniwiki
☆33Jun 19, 2024Updated 2 years ago
Alternatives and similar repositories for BlueTeamReference
Users that are interested in BlueTeamReference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆34May 21, 2024Updated 2 years ago
- 免杀☆12May 6, 2024Updated 2 years ago
- 浏览器数据清除脚本，可以检查浏览器中有没有存储特定网址的密码，然后实行数据的清除，主要是用于攻防演练中蓝队防止钓鱼获取浏览器密码。☆18Jul 8, 2024Updated 2 years ago
- Chrome-X 后渗透持久化与凭据监听☆39Jun 6, 2025Updated last year
- PHP代码审计案例-1000PHP☆28Aug 20, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆17Aug 25, 2025Updated last year
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆25Oct 29, 2024Updated last year
- 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选☆61Jun 12, 2025Updated last year
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 4 years ago
- 一款在github上发现敏感信息的自动化收集工具☆232Apr 21, 2022Updated 4 years ago
- CVE-2020-10199 CVE-2020-10204 Python POC☆19Apr 7, 2020Updated 6 years ago
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- 蓝凌OA的前后台密码的加解密工具☆95Dec 21, 2020Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- go语言免杀shellcode☆17Dec 31, 2021Updated 4 years ago
- 免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus☆16Jan 12, 2024Updated 2 years ago
- A Security Operation Tool Based on Large Language Models 基于大语言模型的安全运营工具☆23Mar 20, 2024Updated 2 years ago
- CobaltStrike profile by 风起☆38Sep 29, 2021Updated 4 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序（`.wxapkg`）的智能反编译与敏感信息检索☆29Dec 12, 2025Updated 9 months ago
- 多人协同信息安全渗透测试报告编写/导出平台☆26Jun 18, 2024Updated 2 years ago
- Gscan二开版☆13Apr 11, 2024Updated 2 years ago
- 数据安全风险枚举框架（Data Security Risk Enumeration）☆57Mar 2, 2026Updated 6 months ago
- 内网横向利用工具，用于ssh wmiexec等常规服务，也可以当作一个数据库执行命令工具☆65May 15, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 基于ants框架设计的网络请求并发模型☆17Nov 27, 2023Updated 2 years ago
- GitHubApi CVE Poc监控工具☆13Jan 23, 2026Updated 8 months ago
- 威胁情报播报☆48Updated this week
- 用友NC-OA漏洞利用☆88Nov 25, 2021Updated 4 years ago
- ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆177May 17, 2024Updated 2 years ago
- 遇到过的弱口令☆10Nov 21, 2023Updated 2 years ago
- exp for useful vuln☆11Jul 9, 2021Updated 5 years ago
- A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE☆98Feb 12, 2025Updated last year
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- burp手工检测fastjson辅助☆86Mar 4, 2024Updated 2 years ago
- Robust Encryption of Quantum Medical Images☆11May 20, 2019Updated 7 years ago
- Godzilla java Decode,哥斯拉jsp(内存马)流量解密☆113Jan 20, 2022Updated 4 years ago
- whatweb plus plugins☆17Sep 5, 2025Updated last year
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 5 years ago
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆19Sep 15, 2026Updated last week
- ☆14Jul 22, 2023Updated 3 years ago