smitnald Goto Github PK

bshell

A webshell helps script kiddies to bypass disable_functions

burpauthzplugin

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypass_disablefunc_via_ld_preload-1

bypassshell

anti AV

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

cc-attack

chinesedarkwebcrawler

中文暗网爬虫

chunked-coding-converter

Burp suite 分块传输辅助插件

chunkedhttpadapter

参考《利用分块传输吊打所有WAF》修改的requests的Adapter

cknife

Cknife

cloudpentestcheatsheets

云渗透清单This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cobalt-strike-aggressor-scripts

Cobalt Strike Aggressor 插件包

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android & iOS command cheatsheet

cooolis-ms

Cooolis-ms is a server that supports the Metasploit Framework RPC. It is used to work with the Shellcode and PE loader. To some extent, it bypasses the static killing of anti-virus software, and allows the Cooolis-ms server to communicate with the Metasploit server. Separation.

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

csp-auditor

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

ctf

CTF (Capture The Flag) writeups, code snippets, notes, scripts

ctf-tools

Some setup scripts for security research tools.

ctfium

A collection of pwn challenges from various CTFs.

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-9484

用Kali 2.0复现Apache Tomcat Session反序列化代码执行漏洞

dbi-stuff

Resources About Dynamic Binary Instrumentation and Dynamic Binary Analysis

defvul

DSO-Lab 漏洞研究成果总结分享

deimosc2

DeimosC2 is a Golang command and control framework for post-exploitation.

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dirtycow-vdso

PoC for Dirty COW (CVE-2016-5195)

dirtycow.github.io

Dirty COW