idealdreamlast Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

androidsecuritystudy

安卓应用安全学习

apache-tomcat-mongodb-remote-code-execution

Apache Tomcat + MongoDB Remote Code Execution

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-frida

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

awvs-decode

AWVS 最简单、最快、最方便、最新的解码/解密方法，仅15行代码！！无须任何依赖任何工具

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

burpcrypto

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite).

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

crawlergo

A powerful dynamic crawler for web vulnerability scanners

csharp-tools

.NET C# Tools

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2020-9484

用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞

deserizationecho

反序列化回显代码

discoversubdomain

前渗透信息探测工具集-子域名

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

findshell

内存马查杀工具，尤其针对Agent型，原理是dump出JVM当前的class并进行字节码分析，并加入自动修复的功能

frida-dexdump

Fast search and dump dex on memory.

frida-snippets

Hand-crafted Frida examples

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gitpreytest

goproxy

Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

idealdreamlast.github.io

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javaserializetools

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 2017-12-30： 添加 weblogic xml反序列化漏洞 CVE-2017-10271

javaserialkiller

Burp extension to perform Java Deserialization Attacks

js-cryptor

Burp extension to help test applications that use JS encryption

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jspforantsword

**蚁剑JSP一句话Payload