n0p1 Goto Github PK

javaweb-sec

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jscat

JScript RAT

koadic

logtamper

python修改linux日志

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

mimikatz-rs

Rusty Mimikatz - All credits to: github.com/ThottySploity/mimiRust (Original author deleted account so I uploaded for community use)

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

ocr_api_server

使用ddddocr的最简api搭建项目，支持docker

pasc2at

高级PHP应用程序漏洞审核技术 by 80vul

pocv

Compatible with xray and nuclei poc framework

redis-rce

Redis 4.x/5.x RCE

redisexp

Redis 漏洞利用工具

redismodules-executecommand

Tools, utilities and scripts to help you write redis modules!

restore-source-tree

Restores file structure from source map

shiroexp

shiro综合利用工具

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

svclessspy

svc WebShell

tinynuke

zeus-style banking trojan

ueditor

rich text 富文本编辑器

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

webdav

Simple Go WebDAV server.

xray-poc-generation

🧬 辅助生成 XRay YAML POC