攻防演练中防守方重点知识点整理，旨在方便平时看看，也在需要的时候有一个miniwiki
☆33Jun 19, 2024Updated 2 years ago
Alternatives and similar repositories for BlueTeamReference
Users that are interested in BlueTeamReference are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 用于爬取谷歌关键词搜索的url，便于红队，src等快速提取☆34May 21, 2024Updated 2 years ago
- 免杀☆11May 6, 2024Updated 2 years ago
- 浏览器数据清除脚本，可以检查浏览器中有没有存储特定网址的密码，然后实行数据的清除，主要是用于攻防演练中蓝队防止钓鱼获取浏览器密码。☆17Jul 8, 2024Updated 2 years ago
- Chrome-X 后渗透持久化与凭据监听☆39Jun 6, 2025Updated last year
- 专为渗透小白定制的SQL注入靶场，上手简单(巨难)，练习sql注入的不二之选☆61Jun 12, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 海康威视iSecure后渗透☆32Aug 13, 2024Updated 2 years ago
- 通过Fofa引擎实现对外网暴露资产进行监控，并每日通过企业微信机器人上报条匹配结果、存活站点。☆12May 17, 2024Updated 2 years ago
- php webshell bypass D盾、safedog、360、火绒等，仅支持php7☆18Aug 25, 2025Updated last year
- 收集一些有意思的蓝队项目☆23Jun 14, 2024Updated 2 years ago
- PHP代码审计案例-1000PHP☆28Aug 20, 2024Updated 2 years ago
- python版批量漏洞扫描，poc大部分来源网络，长期更新，也可自行扩展。☆26Jul 24, 2024Updated 2 years ago
- Spring Cloud Function SPEL RCE demo☆11Apr 2, 2022Updated 4 years ago
- Linux 持久化工具：自动检测可持久化方式，目前支持ssh及crab持久化，无需依赖开箱即用☆25Oct 29, 2024Updated 2 years ago
- ☆18Apr 7, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 通过分离的方式免杀火绒☆12Dec 15, 2023Updated 2 years ago
- 渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell co…☆32Feb 7, 2024Updated 2 years ago
- xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作，上传，job等相应操作。☆193Nov 25, 2023Updated 2 years ago
- ☆12Dec 11, 2025Updated 10 months ago
- CVE-2020-10199 CVE-2020-10204 Python POC☆19Apr 7, 2020Updated 6 years ago
- 《FanZhi-攻击与反制的艺术》☆69Dec 8, 2023Updated 2 years ago
- go语言免杀shellcode☆17Dec 31, 2021Updated 4 years ago
- CobaltStrike profile by 风起☆38Sep 29, 2021Updated 5 years ago
- 一款在github上发现敏感信息的自动化收集工具☆231Apr 21, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- 免杀捆绑器，过国内主流杀软。A Bundler bypass anti-virus☆17Jan 12, 2024Updated 2 years ago
- WxappRevealer 是一款跨平台、独立可执行的命令行工具，专注于对 WeChat 小程序（`.wxapkg`）的智能反编译与敏感信息检索☆29Dec 12, 2025Updated 10 months ago
- A Security Operation Tool Based on Large Language Models 基于大语言模型的安全运营工具☆23Mar 20, 2024Updated 2 years ago
- 漏洞poc☆113Jan 4, 2026Updated 10 months ago
- 蓝凌OA的前后台密码的加解密工具☆95Dec 21, 2020Updated 5 years ago
- exp for useful vuln☆11Jul 9, 2021Updated 5 years ago
- 基于ants框架设计的网络请求并发模型☆17Nov 27, 2023Updated 2 years ago
- 内网横向利用工具，用于ssh wmiexec等常规服务，也可以当作一个数据库执行命令工具☆66May 15, 2023Updated 3 years ago
- Java XMLDecoder payload generator☆16Jul 27, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- GitHubApi CVE Poc监控工具☆14Jan 23, 2026Updated 9 months ago
- 千机-红队免杀木马自动生成器 Bypass defender、火绒、360等国内主流杀软 随机加密混淆shellcode快速生成免杀马☆427Jan 14, 2024Updated 2 years ago
- 威胁情报播报☆48Oct 30, 2026Updated last week
- 存储桶遍历漏洞利用工具☆500Jul 24, 2026Updated 3 months ago
- 多人协同信息安全渗透测试报告编写/导出平台☆26Jun 18, 2024Updated 2 years ago
- 遇到过的弱口令☆10Nov 21, 2023Updated 2 years ago
- Linux 安全应急响应检查脚本。早期版本叫 linuxcheck（更新到 v5.0 版本后不再更新），在旧版本基础上功能模块化就有了新版本叫 linuxGun，全工具使用 shell 编写，不依靠外部环境，尽量不使用第三方条件，希望在极端条件下能出一份力。☆325Feb 26, 2026Updated 8 months ago