Stars
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
awesome cloud security 收集一些国内外不错的云安全资源,该项目主要面向国内的安全人员
serve as a reverse proxy to protect your web services from attacks and exploits.
EasyPen is a GUI program which helps pentesters do target discovery, vulnerability scan and exploitation
[WIP] 整理过去的分享,从零开始的Kubernetes攻防 🧐
KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).
Kerberos unconstrained delegation abuse toolkit
A tool to extract the IdP cert from vCenter backups and log in as Administrator
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
2018年初整理的一些内网渗透TIPS,后面更新的慢,所以整理出来希望跟小伙伴们一起更新维护~
一份通俗易懂、风趣幽默的Java学习指南,内容涵盖Java基础、Java并发编程、Java虚拟机、Java企业级开发、Java面试等核心知识点。学Java,就认准二哥的Java进阶之路😄
【未来服务器端编程语言】最全空降golang资料补给包(满血战斗),包含文章,书籍,作者论文,理论分析,开源框架,云原生,大佬视频,大厂实战分享ppt
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527