Wadcoms.github.ioWADComs is an interactive cheat sheet, containing a curated list of Unix/Windows offensive tools and their respective commands.
Stars: ✭ 431 (+314.42%)
K8toolsK8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
Stars: ✭ 4,173 (+3912.5%)
PasetoJava Implementation of Platform-Agnostic Security Tokens - https://paseto.io
Stars: ✭ 32 (-69.23%)
Node Express Mongodb Jwt Rest Api SkeletonThis is a basic API REST skeleton written on JavaScript using async/await. Great for building a starter web API for your front-end (Android, iOS, Vue, react, angular, or anything that can consume an API). Demo of frontend in VueJS here: https://github.com/davellanedam/vue-skeleton-mvp
Stars: ✭ 603 (+479.81%)
Go Admingo web api,包含gin+gorm+jwt+rbac等。
Stars: ✭ 298 (+186.54%)
PrivesccheckPrivilege Escalation Enumeration Script for Windows
Stars: ✭ 1,032 (+892.31%)
Kernel ExploitsMy proof-of-concept exploits for the Linux kernel
Stars: ✭ 1,173 (+1027.88%)
Meiam.system.NET 5 / .NET Core 3.1 WebAPI + Vue 2.0 + RBAC 企业级前后端分离权限框架
Stars: ✭ 340 (+226.92%)
Django Graphql JwtJSON Web Token (JWT) authentication for Graphene Django
Stars: ✭ 649 (+524.04%)
UptuxLinux privilege escalation checks (systemd, dbus, socket fun, etc)
Stars: ✭ 260 (+150%)
ContractSource code: https://etherscan.io/address/0x2b591e99afe9f32eaa6214f7b7629768c40eeb39#contracts | All rights are reserved. IT IS NOT LICENSED FOR COPYING. We don't use github for dev.
Stars: ✭ 52 (-50%)
Dirty sockLinux privilege escalation exploit via snapd (CVE-2019-7304)
Stars: ✭ 533 (+412.5%)
Totp CliA cli-based pass-backed TOTP app
Stars: ✭ 76 (-26.92%)
RoothelperA Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
Stars: ✭ 416 (+300%)
Axios ModuleSecure and easy axios integration with Nuxt.js
Stars: ✭ 998 (+859.62%)
Angular Token🔑 Token based authentication service for Angular with interceptor and multi-user support. Works best with devise token auth for Rails. Example:
Stars: ✭ 376 (+261.54%)
Mana⏣ Solidity Contracts for the Decentraland MANA Token
Stars: ✭ 91 (-12.5%)
KissmeKissme: Kotlin Secure Storage Multiplatform
Stars: ✭ 351 (+237.5%)
OdatODAT: Oracle Database Attacking Tool
Stars: ✭ 906 (+771.15%)
Traitor⬆️ ☠️ Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket
Stars: ✭ 3,473 (+3239.42%)
OscpCollection of things made during my OSCP journey
Stars: ✭ 709 (+581.73%)
ReactAdminant-design-pro +Golang restful-api admin 前后端分离 RBAC权限管理系统
Stars: ✭ 43 (-58.65%)
Sudo killerA tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.
Stars: ✭ 1,073 (+931.73%)
MsdatMSDAT: Microsoft SQL Database Attacking Tool
Stars: ✭ 621 (+497.12%)
EvtBoost Engine for Token Economy
Stars: ✭ 1,226 (+1078.85%)
PayloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 32,909 (+31543.27%)
EthereumbookMastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood
Stars: ✭ 11,663 (+11114.42%)
PasetoPlatform-Agnostic Security Tokens implementation in GO (Golang)
Stars: ✭ 461 (+343.27%)
WinpwnAutomation for internal Windows Penetrationtest / AD-Security
Stars: ✭ 1,303 (+1152.88%)
0xsp Mongoosea unique framework for cybersecurity simulation and red teaming operations, windows auditing for newer vulnerabilities, misconfigurations and privilege escalations attacks, replicate the tactics and techniques of an advanced adversary in a network.
Stars: ✭ 419 (+302.88%)
ToratToRat is a Remote Administation tool written in Go using Tor as a transport mechanism and RPC for communication
Stars: ✭ 415 (+299.04%)
PhpsploitFull-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Stars: ✭ 1,188 (+1042.31%)
A Red Teamer DiariesRedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Stars: ✭ 382 (+267.31%)
Wallet🚀 基于Flutter开发的跨终端数字货币交易所✨
Stars: ✭ 36 (-65.38%)
Infosec referenceAn Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
Stars: ✭ 4,162 (+3901.92%)
EtherwalletkitEthereum Wallet Toolkit for iOS - You can implement an Ethereum wallet without a server and blockchain knowledge.
Stars: ✭ 96 (-7.69%)
BadpotatoWindows 权限提升 BadPotato
Stars: ✭ 361 (+247.12%)
NsudoSeries of System Administration Tools
Stars: ✭ 945 (+808.65%)
Suid3numA standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)
Stars: ✭ 342 (+228.85%)
GtfonowAutomatic privilege escalation for misconfigured capabilities, sudo and suid binaries
Stars: ✭ 68 (-34.62%)
AccessPonzu Addon to manage API access grants and tokens for authentication
Stars: ✭ 13 (-87.5%)
Awesome Windows Red Team A curated list of awesome Windows frameworks, libraries, software and resources for Red Teams
Stars: ✭ 308 (+196.15%)
Juicy PotatoA sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.
Stars: ✭ 1,276 (+1126.92%)
Express Graphql Mongodb BoilerplateA boilerplate for Node.js apps / GraphQL-API / Authentication from scratch - express, graphql - (graphql compose), mongodb (mongoose).
Stars: ✭ 288 (+176.92%)
Ethereum Erc721Non-fungible token implementation for Ethereum-based blockchains.
Stars: ✭ 253 (+143.27%)
Kirby3 AutoidAutomatic unique ID for Pages, Files and Structures including performant helpers to retrieve them. Bonus: Tiny-URL.
Stars: ✭ 58 (-44.23%)
Delete2systemWeaponizing for Arbitrary Files/Directories Delete bugs to Get NT AUTHORITY\SYSTEM
Stars: ✭ 95 (-8.65%)
Go AloneA simple to use, high-performance, Go (golang) MAC signer.
Stars: ✭ 82 (-21.15%)
BottyclientA slim Discord client with many cool features including less network traffic which supports bot tokens, but user tokens theoretically work too. Tags: Discord Bot Client Token for Bot Botting Download English
Stars: ✭ 58 (-44.23%)
RavencoinRavencoin Core integration/staging tree
Stars: ✭ 733 (+604.81%)