Example Usage
本列表,收集一些在服务器上运行的一些工具,组件自动化,服务器长期挂跑项目 欢迎提issues,来丰富工作流程,比如自己挖洞时候的一些简易流程,工具+调用命令, 在我的日常渗透中,我发现我重复调用几个工具,但是不同的调用组合渗透的工作流程,有时候调用命令会忘记,所以有了这个列表,来达到帮助我记忆一些流程命令的文档,未来还会细化过程,脚本小子福音了 其中有些连接和笔记从17年我的笔记所摘取,有错误请提醒,我修改一下,有些技巧也很老了,现在信息收集分为主动化和被动化,主动化更偏向于发现新资产,被动化稍微弱点。
See also
cve-search_mcp
Open Source
A Model Context Protocol (MCP) server for querying the CVE-Search API…
365-Stealer
Free
365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Cons…
MSSprinkler
Open Source
MSSprinkler is a password spraying utility for organizations to test their Microsoft Online accounts…
CVE_Prioritizer
Open Source
Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prior…
msfvenom
Open Source
Kali
Metasploit standalone payload generator and encoder. Creates payloads for all platforms with customi…
devguard
Free
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage …