c0olw Goto Github PK

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jeecg-boot

⭐️「企业级低代码平台」前后端分离架构SpringBoot 2.x，SpringCloud，Ant Design&Vue，Mybatis，Shiro，JWT。强大的代码生成器让前后端代码一键生成，无需写任何代码! 引领新的开发模式OnlineCoding->代码生成->手工MERGE，帮助Java项目解决70%重复工作，让开发更关注业务，既能快速提高效率，帮助公司节省成本，同时又不失灵活性。

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

A malicious LDAP server for JNDI injection attacks

jndiexploit-1

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

marshalsec

mdat

MDAT - Multiple Database Attacking Tool

mimikatz

A little tool to play with Windows security

mp-unpack

基于electron-vue开发的跨平台微信小程序自助解包(反编译)客户端

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

oneforall

OneForAll是一款功能强大的子域收集工具

openbilibili-go-common

哔哩哔哩 bilibili 网站后台工程 源码 来自 https://github.com/openbilibili

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest_study

从零开始内网渗透学习

php-audit-labs

一个关于PHP的代码审计项目

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

poc-t

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

pocbox

PoCBox - 赏金猎人的脆弱性测试辅助平台（破300star写重构版本，400star免费线上版本开放【在线食用地址：由于经常被DDOS导致服务器资源恶意被占用 费用过大决定关闭服务 】，1000star开源重构全新版本！）

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile

pyqt4

从零开始学习PyQt4，Python2.7+PyQt4.5

redis-rogue-server

Redis(<=5.0.5) RCE

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

redteamer

红方人员作战执行手册

rogue-jndi

A malicious LDAP server for JNDI injection attacks

safetypdf

渗透测试教程大合集打包

sap_eem_cve-2020-6207

PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)