adamloveve Goto Github PK

ida_pro_7.2

IDA_Pro_7.2

jolokia-exploitation-toolkit

jolokia-exploitation-toolkit

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

k8cscan

K8Cscan大型内网渗透自定义插件化扫描神器，包含信息收集、网络资产、漏洞扫描、密码爆破、漏洞利用，程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本，支持Cobalt Strike联动

learngit

推送请注意：请使用UTF-8编码，只接受能被自动Merge的Pull Request

libinjection

SQL / SQLI tokenizer parser analyzer

liqunkit_

marshalsec

memshell

a webshell resides in the memory of java web server

myfirstapp

第一个app

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

penetration_testing_case

用于记录分享一些有趣的案例

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce

phuip-fpizdam

Exploit for CVE-2019-11043

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

remotereflectivedll

sharptoolsaggressor

内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~

shell_script

一键安装 shadowsocks，支持 chacha20-ietf-poly1305 加密方式

shiroscan

Shiro<=1.2.4反序列化，一键检测工具

springboot_actuator_rce

SpringBoot_Actuator_RCE

sql_lab_primary

for beginner

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

subdomain_dict

subdomain_dict

sublist3r

Fast subdomains enumeration tool for penetration testers

tdoa_rce

通达OA综合利用工具

upload-labs

一个想帮你总结所有类型的上传漏洞的靶场

v2ray

最好用的 V2Ray 一键安装脚本 & 管理脚本

webshell

This is a webshell open source project

windows-exploits

Windows 下的提权大合集

xxer

A blind XXE injection callback handler. Uses HTTP and FTP to extract information. Originally written in Ruby by ONsec-Lab.