攻防演练中防守方重点知识点整理，旨在方便平时看看，也在需要的时候有一个miniwiki
☆30Jun 19, 2024Updated last year
Alternatives and similar repositories for BlueTeamReference
Users that are interested in BlueTeamReference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆33May 21, 2024Updated last year
- 浏览器数据清除脚本，可以检查浏览器中有没有存储特定网址的密码，然后实行数据的清除，主要是用于攻防演练中蓝队防止钓鱼获取浏览器密码。☆18Jul 8, 2024Updated last year
- 免杀☆12May 6, 2024Updated last year
- CNVD-2023-80853 Apache ActiveMQ < 5.18.3 RCE☆19Oct 27, 2023Updated 2 years ago
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- PHP代码审计案例-1000PHP☆27Aug 20, 2024Updated last year
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated 7 months ago
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆25Oct 29, 2024Updated last year
- 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选☆59Jun 12, 2025Updated 9 months ago
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- 一款在github上发现敏感信息的自动化收集工具☆229Apr 21, 2022Updated 3 years ago
- CVE-2020-10199 CVE-2020-10204 Python POC☆19Apr 7, 2020Updated 5 years ago
- 外网信息收集-思维导图☆17Jul 17, 2023Updated 2 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序（`.wxapkg`）的智能反编译与敏感信息检索☆28Dec 12, 2025Updated 3 months ago
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- 蓝凌OA的前后台密码的加解密工具☆95Dec 21, 2020Updated 5 years ago
- A Security Operation Tool Based on Large Language Models 基于大语言模型的安全运营工具☆23Mar 20, 2024Updated 2 years ago
- go语言免杀shellcode☆19Dec 31, 2021Updated 4 years ago
- CobaltStrike profile by 风起☆38Sep 29, 2021Updated 4 years ago
- 数据安全风险枚举框架（Data Security Risk Enumeration）☆55Mar 2, 2026Updated 3 weeks ago
- 内网横向利用工具，用于ssh wmiexec等常规服务，也可以当作一个数据库执行命令工具☆68May 15, 2023Updated 2 years ago
- Gscan二开版☆12Apr 11, 2024Updated last year
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 2 months ago
- 多人协同信息安全渗透测试报告编写/导出平台☆26Jun 18, 2024Updated last year
- DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 威胁情报播报☆49Updated this week
- 基于ants框架设计的网络请求并发模型☆17Nov 27, 2023Updated 2 years ago
- 遇到过的弱口令☆10Nov 21, 2023Updated 2 years ago
- 用友NC-OA漏洞利用☆88Nov 25, 2021Updated 4 years ago
- Robust Encryption of Quantum Medical Images☆11May 20, 2019Updated 6 years ago
- ARL官方仓库备份项目+指纹添加工具：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆174May 17, 2024Updated last year
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 3 years ago
- 海康威视iSecure后渗透☆31Aug 13, 2024Updated last year
- exp for useful vuln☆12Jul 9, 2021Updated 4 years ago
- Wordpress hosting with auto-scaling on Cloudways • AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- 网络安全相关工具和文章链接总结☆124Mar 7, 2026Updated 2 weeks ago
- A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE☆95Feb 12, 2025Updated last year
- burp手工检测fastjson辅助☆87Mar 4, 2024Updated 2 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 4 years ago
- Chrome-X 后渗透持久化与凭据监听☆37Jun 6, 2025Updated 9 months ago
- ☆13Jul 22, 2023Updated 2 years ago
- Godzilla java Decode,哥斯拉jsp(内存马)流量解密☆112Jan 20, 2022Updated 4 years ago