charshine Goto Github PK

adminlte

AdminLTE - Free Premium Admin control Panel Theme Based On Bootstrap 3.x

angelsword

Python3编写的CMS漏洞检测框架

awesome-incident-response

A curated list of tools for incident response

blindwatermark

盲水印 by python

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

burplugin-java-rce

******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python类库 如果初始化失败请按照如下步骤安装类库， 1、执行 $[python]/Scrips/easy_install pip 2、requests模块 安装方法 pip install requests 3、termcolor模块安装方法： pip install termcolor github: https://github.com/bigsizeme/java-rce-tools burpsuite源码地址：https://github.com/bigsizeme/burplugin-java-rce

cobra

Source Code Security Audit (源代码安全审计)

codingpy

编程派：分享有关Python的新闻、教程、资源等内容 — http://codingpy.com

common-password

字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学，当你收集到目标的具体信息后，你就可以通过这个脚本来智能化生成关于目标的字典。

ctf

Ctf solutions from p4 team

ctfdefense

Some tools for CTF off line

cve-2017-7529

env.g0v.tw

Taiwan Environment Dashboard

get_root

在拿到webshell 提权无效时（普通用户不能拿到root权限），可以执行get_root获得root权限

jsfuck

Write any JavaScript with 6 Characters: []()!+

koolshare.github.io

For koolshare.cn

micro8

pest

this is some pentest script based on python, just simple but useful, maybe it can help you do something else. just have a try

prepare-for-awd

AWD攻防赛脚本集合

s2-016-exp

S2-016 Exploit && Scanner

single

🎈 一个简洁大气，含夜间模式的 Typecho 博客模板

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

struts2-s016-poc

struts2-scan

批量扫描目标是否存在各个版本Struts2漏洞,s2-045,s2-048,s2-016

tinyfecvpn

A VPN Designed for Lossy Links, with Build-in Forward Error Correction Support. Improves your Network Quality on a High-latency Lossy Link.

vlmcsd

KMS Emulator in C (currently runs on Linux including Android, FreeBSD, Solaris, Minix, Mac OS, iOS, Windows with or without Cygwin)

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

vuln_javascript

模拟一个存在漏洞的JavaScript 运行环境,用来学习浏览器漏洞原理和练习如何编写Shellcode (a JavaScript Execute Envirment which study browser vuln and how to write Shellcode ) ..

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

winshock-test

Bash script that tests if a system is Winshock (MS14-066) vulnerable