superzero Goto Github PK

apache-solr-rce

Apache Solr Exploits 🌟

awesome-intranet_pentest_tool

awesome-redteam

一个攻防知识仓库

cve-2021-1675

Impacket implementation of CVE-2021-1675

cve-2021-30551

my exp for chrome V8 CVE-2021-30551

cve-2022-39197

CobaltStrike <= 4.7.1 RCE

cve-2023-24055_poc

CVE-2023-24055 PoC (KeePass 2.5x)

cve-2023-33246

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

cve-2024-23897

CVE-2024-23897 - Jenkins 任意文件读取 利用工具

docker-easyconnect

使深信服（Sangfor）开发的非自由的代理软件 EasyConnect 运行在 docker 中，并提供 socks5 服务

domaintools

a tools about Domain Name System

domainweakpasswdcheck

内网安全·域账号弱口令审计

exploits

Pwn stuff.

fastjson

Fastjson姿势技巧集合

fingerprinthub

侦查守卫(ObserverWard)的指纹库

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

grab_beacon_config

gscan

本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

htmlsimilarity

网页相似度判断：根据网页结构判断页面相似性 ，可用于相似度计算、越权检测等(Determine page similarity based on HTML page structure)

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

jailbreak

Jailbreak

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

mssql-pentest-cheatsheet

myexploit

OAExploit一款基于产品的一键扫描工具。

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

ola

pages

For Static Html