1013 Open source projects that are alternatives of or similar to Sudo_killer

A curated list of CTF frameworks, libraries, resources and softwares

SS7 MAP (pen-)testing toolkit. DISCONTINUED REPO, please use: https://github.com/0xc0decafe/ss7MAPer/

用于记录内网渗透(域渗透)学习 :-)

DEFCON 2018 Qualification writeups

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

CTF writeups from Balsn

BootStomp: a bootloader vulnerability finder

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

cobaltstrike ms17-010 module and some other

🐈Medusa是一个红队武器库平台，目前包括扫描功能(200+个漏洞)、XSS平台、协同平台、CVE监控等功能，持续开发中 http://medusa.ascotbe.com

Search for Directory Traversal Vulnerabilities

Linux privilege escalation exploit via snapd (CVE-2019-7304)

国内各大CTF赛题及writeup整理

A Golang implant that uses Slack as a command and control server

Writeup of security — CTFLearn Challenges.

A (partial) Python rewriting of PowerSploit's PowerView

A REST API security testing framework.

🌸 Interactive shellcoding environment to easily craft shellcodes

渗透步骤，web安全，CTF，业务安全，人工智能，区块链安全，安全开发，无线安全，社会工程学，二进制安全，移动安全，红蓝对抗，运维安全，风控安全，linux安全

Mirror of FreeIPA, an integrated security information management solution

红蓝对抗跨平台远控工具

Chef repository for pentesting tools

sudo for windows

CVE Alerting Platform

Jam all wifi clients/routers.

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Exploits and Security Tools Framework 2.0.1

A collection of Windows, Linux and MySQL privilege escalation scripts and exploits.

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

Modified template for the OSCP Exam and Labs. Used during my passing attempt

Burp extension to passively scan for applications revealing software version numbers

[ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву 👻 (❤-❤) 👻

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

Code-Audit-Challenges

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

Notes for taking the OSCP in 2097. Read in book form on GitBook

Free advanced and modern Windows botnet with a nice and secure PHP panel.

A hyper plugin to provide a flexible GDB GUI with the help of GEF, pwndbg or peda

SIP-Based Audit and Attack Tool

红队综合渗透框架

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

network visualization & vulnerability management/reporting

🆕 The Multi-Tool Web Vulnerability Scanner.

A tool for logging data/testing devices with a Wiegand Interface. Can be used to create a portable RFID reader or installed directly into an existing installation. Provides access to a web based interface using WiFi in AP or Client mode. Will work with nearly all devices that contain a standard 5V Wiegand interface. Primary target group is 26-37bit HID Cards. Similar to the Tastic RFID Thief, Blekey, and ESPKey.

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

Notes about attacking Jenkins servers

Wordpress Attack Suite

Decrypted content of eqgrp-auction-file.tar.xz

CaptfEncoder是一款跨平台网络安全工具套件，提供网络安全相关编码转换、古典密码、密码学、特殊编码等工具，并聚合各类在线工具。

Perun是一款主要适用于乙方安服、渗透测试人员和甲方RedTeam红队人员的网络资产漏洞扫描器/扫描框架

CTF🚩 AWD (Attack with Defense) 线下赛平台 / AWD platform - 欢迎 Star~ ✨

Security Manage Framwork is a security management platform for enterprise intranet, which includes asset management, vulnerability management, account management, knowledge base management, security scanning automation function modules, and can be used for internal security management. This platform is designed to help Party A with fewer security personnel, complicated business lines, difficult periodic inspection and low automation to better achieve internal safety management.

CTF writeups

Writeup of CVE-2020-15906

瓶颈渗透,web渗透,red红队,fuzz param,注释,js字典,ctf

Resources for Windows exploit development

Advisories, proof of concept files and exploits that have been made public by @pedrib.

kernel privilege escalation enumeration and exploitation framework