p611148aadsl Goto Github PK

2021_hvv

2021 hw

2022-hw-poc

2022 护网行动 POC 整理

afrog

afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具 - A tool for finding vulnerabilities

ant-application-security-testing-benchmark

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

assets

test

corax-community

Corax for Java: A general static analysis framework for java code checking.

cve-2021-43297-poc

CVE-2021-43297 POC，Apache Dubbo<= 2.7.13时可以实现RCE

ehole

EHole(棱洞)2.0 重构版-红队重点攻击系统指纹探测工具

emmm

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

geacon_plus

CobaltStrike beacon written in golang

glint

glint 是一款基于浏览器爬虫golang开发的web漏洞主动(被动)扫描器

go-common

哔哩哔哩 bilibili 网站后台工程 源码

gogo

面向红队的, 高度可控可拓展的自动化引擎

golangbypassav

研究利用golang各种姿势bypassAV

hamster

Hamster是基于mitmproxy开发的异步被动扫描框架，基于http代理进行被动扫描，主要功能为重写数据包、签名、漏洞扫描、敏感参数收集等功能（开发中）。

havoc

The Havoc Framework.

java_summary

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

joern

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

ladongo

Ladon for Kali 全平台开源内网渗透扫描器,Windows/Linux/Mac/路由器内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

memorymodule

Library to load a DLL from memory.

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

p611148aadsl.github.io

CrossTime的个人博客

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pocassist

全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.