baisesecxxx Goto Github PK

--php

代码审计知识点整理-php

.jpg-pdf-

一个简单的爬虫小程序，可以自动将网页上的图片或者pdf文件，视频文件等保存到本地

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

activemqgetshell

Code By:Tas9er / ActiveMQ漏洞安全测试

adinfo

域信息收集工具

adminer

agentinjecttool

改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能

alarm-clock

alicloud-tools

阿里云ECS、策略组辅助小工具

allin

A flexible scanner

apolloscanner

自动化巡航扫描框架（可用于红队打点评估）

apt_t00ls

高危漏洞利用工具

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

av-bypass-learning

免杀学习笔记

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phones or emulators, you can unpack APK File in several seconds.

bloodhound

Six Degrees of Domain Admin

blueshell

红蓝对抗跨平台远控工具

btbypass

bugkuawd

bylibrary

白阁文库内测版

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypassanti-virus

免杀姿势学习、记录、复现。

bypassav

免杀shellcode加载器

bypassavnote

免杀死亡笔记

bypassbehinder4j

冰蝎Java WebShell自动化免杀生成

bypasspro

对权限绕过自动化bypass的burpsuite插件

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chaos

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

chatgpt-codereview

这是一个调用chatGPT进行代码审计的工具