iiusky's Projects
A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go.
Lair is a reactive attack collaboration framework and web application built with meteor.
SRC子域名资产监控
lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具,支持tcp流量转发,可支持任何tcp上层协议(访问内网网站、本地支付接口调试、ssh访问、远程桌面...)。目前市面上提供类似服务的有花生壳、TeamView、GoToMyCloud等等,但要使用第三方的公网服务器就必须为第三方付费,并且这些服务都有各种各样的限制,此外,由于数据包会流经第三方,因此对数据安全也是一大隐患。技术交流QQ群 946273429
Inject code and spy on wifi users
Credentials recovery project
Decentralized VPN in golang
从0开始学安全,注重实战+技巧的运用,分享各种安全攻防干货,包括但不限于:内网渗透、代码审计 、Web安全、企业安全等。
对于安全学习的一些总结,更新ing,期待 Fork & Star!
Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
You had one job, or more then one, which can be done in steps
💻 Democratizing Snippet Management (macOS/Win/Linux)
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
linux-kernel-exploits Linux平台提权漏洞集合
linux信息搜集脚本 主要用于应急响应
Simple licensing library for golang.
💥 A Lodash-style Go library based on Go 1.18+ Generics (map, filter, contains, find...)
BurpSuite Extension: Log4j RCE Scanner
Investigate malicious Windows logon by visualizing and analyzing Windows event log
LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network
Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)
CodeQL 寻找 JNDI利用 Lookup接口
Windows / Linux Local Privilege Escalation Workshop
Luminati HTTP/HTTPS Proxy manager
红队基础设施自动化部署工具
An Open Source Java Decompiler Gui for Procyon
HTTPDecrypt
一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项