Focus on promoting the evolution of tools in different aspects of security research.专注于推动安全研究各个领域工具化.(项目收录逐步迁移至 https://github.com/knownsec/404StarLink)

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

VanillaRat is an advanced remote administration tool completely coded in C# for Windows.

边界打点后的自动化渗透工具

CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞

ProxyLogon Pre-Auth SSRF To Arbitrary File Write

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

CVE-2021-21972 Exploit

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

ATTCK-PenTester-Book

红方人员作战执行手册

用于记录内网渗透(域渗透)学习 :-)

A tool for injecting 64-bit executables into legitimate processes. Users can specify a local file or download one from a URL, with all operations performed in memory to evade antivirus detection.

MDUT - Multiple Database Utilization Tools

Windows WinSock2.2 Reverse Shell DLL

Minimal Windows service boilerplate

Minimal Windows service boilerplate packaged as DLL

Use to check the valid account of the Remote Desktop Protocol(Support plaintext and ntlmhash)

记录自己编写、修改的部分工具

AV Evasion Tool For Red Team Ops

OneForAll是一款功能强大的子域收集工具

articles

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

Secure Socket Funneling - Network tool and toolkit - TCP and UDP port forwarding, SOCKS proxy, remote shell, standalone and cross platform

Windows reverse shell service

simple reverse shells in c for both linux and windows

ReverseShell Linux/Windows

persistent windows backdoor with reverse shell