huanyues Goto Github PK

av_evasion_tool

掩日 - 免杀执行器生成工具

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dirsearch

Web path scanner

ehole-

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

fastjson

A fast JSON parser/generator for Java.

fastjsonscan

fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

huanyues.github.io

jd-gui

A standalone Java Decompiler GUI

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

nucleitp

自动整合全网Nuclei的漏洞POC，实时同步更新最新POC！

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

proxy_pool

Python爬虫代理IP池(proxy pool)

revokemsgpatcher

:trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shellcodeloader

shellcodeloader

ssr-vpn-shadowsocksr-csharp

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

weblogicscanner

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14882、CVE-2020-14883

wechatopendevtools-python

WeChatOpenDevTool 微信小程序强制开启开发者工具

xsstrike

Most advanced XSS scanner.

yakit

Cyber Security ALL-IN-ONE Platform

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.