chen1sheng Goto Github PK

2021_hvv

2021 hw

2021hvv_vul

2021hvv漏洞汇总

30-seconds-of-python-code

Python implementation of 30-seconds-of-code

ajpy

bludit-cms-version-3.9.2-brute-force-protection-bypass-script

bylibrary

白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目

cve-2017-11907

Windows: heap overflow in jscript.dll in Array.sort

cve-2021-1675

Impacket implementation of CVE-2021-1675

dnscat2-powershell

A Powershell client for dnscat2, an encrypted DNS command and control tool.

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

empire

Empire is a PowerShell and Python post-exploitation agent.

example-scanner-checks

gitlab_rce

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

hack-requests

The hack-requests is an HTTP network library for hackers

hyuga

Hyuga 一个用来记录DNS查询和HTTP请求的监控工具。

imfgnet356

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

javaseclearndemo

jed

jndi-inject-exploit

解决FastJson、Jackson、Log4j2、原生JNDI注入漏洞的高版本JDKBypass利用，探测本地可用反序列化gadget达到命令执行、回显命令执行、内存马注入

jsencrypter

一个用于加密传输爆破的Burp Suite插件

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

linkfinder

A python script that finds endpoints in JavaScript files

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

micro8

Gitbook

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

parsia-code

Contains random code and some of my older projects

passive-scan-client

Burp被动扫描流量转发插件

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……