sanwenkit Goto Github PK

droidimg

Android/Linux vmlinux loader

f-scrack

对各类服务进行弱口令检测的脚本

fancybear

Fancy Bear Source Code

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fdbus

fimi_a3

Reverse engineering the A3 drone drone firmware + camera fw + remote fw

find-sec-bugs

The FindBugs plugin for security audits of Java web applications and Android applications. (Also work with Scala projects)

frankencert

Frankencert - Adversarial Testing of Certificate Validation in SSL/TLS Implementations

fuzzing-imagemagick

OpenSource My ImageMagick Fuzzer ..

gcc-cross-compiler

A script to cross-compile GCC toolchain for various target architectures.

gitminer

Tool for advanced mining for content on Github

gitprey

Searching sensitive files and contents in GitHub associated to company name or other key words

hackazon

A modern vulnerable web app

hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

hidviz

Tool for in-depth analysis of USB HID devices communication

how2heap

A repository for learning various heap exploitation techniques.

htcap

htcap is a web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes.

htpwdscan

A python HTTP weak pass scanner

htran

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

iis_shortname_scanner

an IIS shortname Scanner

initroot

Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java_deserialization_exploits

A collection of Java Deserialization Exploits

javaid

java source code danger function identify prog

javaunserializeexploits

jekyll-omega-theme

HMFAYSAL OMEGA是一款为那些喜欢内容放在网页上面和中间的工程师和文字工作者而做的最小化，很漂亮，有着响应式设计的jekyll主题

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jndiat

JNDI Attacking Tool