lay0us Goto Github PK

memory-horse

关于内存马的学习研究支持新手从0到1，从内存马原理，内存马植入 内存马检测 到内存马防御与内存马应急以及内存马查杀全系列java内存马/php/.net/c++/python 喜欢可以点个star 后续持续更新

memoryshell-javaall

收集内存马打入方式

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

memshelldemo

内存马Demo合集 memshell demo for java / php / python

micro8

Gitbook

micro_service_seclab

Java漏洞靶场

microsoft-auth-exploit

minidump

alternative to procdump

mining-inspection-ver2.0

本地挖矿检测工具 Ver2.0，BUG比较多，欢迎各路大神帮忙修BUG

miniprogram-track

miniprogram track 是用于小程序安全审计的工具包(反编译、调试、代码审计)

mobdict

手机号随机生成多条，可以根据地区、手机号开头前三位来生成

morefind

一款用于快速导出URL、Domain和IP的小工具

morphaes

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it's cross-platform as well and library-independent.

mosquitto

Eclipse Mosquitto - An open source MQTT broker

mrkaplan

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution.

ms15-117

An elevation of privilege vulnerability exists when NDIS fails to check the length of a buffer prior to copying memory into it. An attacker who successfully exploited this vulnerability could gain elevated privileges on a targeted system.

ms17-010

An EternalBlue exploit implementation in pure go

msdt-follina

Codebase to generate an msdt-follina payload

msf-venom-cheatsheet

Single Page Cheatsheet for common MSF Venom One Liners

mssqlproxy

mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

mutants_sessions_self-deletion

Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

my-encryption-template

个人渗透测试常用加解密算法实现。

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...

myblog

记录和分享学习的旅程！

mydocker

<<自己动手写docker>> 源码

myjndiexploit

自己的JNDI 利用工具，添加一些人性化功能

mysql-fake-server

MySQL Fake Server (纯Java实现，内置常见Java反序列化Payload，支持GUI版和命令行版，提供Dockerfile)

mysql_monitor

MySQL Monitor面向研发人员图形可视化监控工具