takeboy Goto Github PK

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.

awesome-spider

爬虫集合

blen

漏洞批量验证框架

build-marshalsec

chinese-translation-att-ck-framework

ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可

cobaltstrike

CobaltStrike's source code

cve-2021-4034

CVE-2021-4034 1day

dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the possibility of applying machine learning and neural networks to detect and classify malicious domains.

easyexcel

快速、简单避免OOM的java处理Excel工具

emergency-response-checklist

应急响应指南 / emergency response checklist

file-download-generator

文件下载命令快捷生成器,单文件版

hide_execute_memory

隐藏可执行内存

hongduiziliao

红队渗透测试|攻防|学习|工具|分析|研究资料汇总

https-github.com-abatchy17-windowsexploits

https-github.com-dr0op-bufferfly

https-github.com-lucifer1993-0day

https-github.com-necreas1ng-vlanpwn

https-github.com-taomujian-linbing

https-github.com-veo-vscan

https-github.com-white-hua-apt_t00ls-

iot_sec_tutorial

IoT安全教程

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化辅助框架，你的工作从未如此简单快捷。

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linux-command

Linux命令大全搜索工具，内容包含Linux命令手册、详解、学习、搜集。https://git.io/linux

linux-exploit-suggester

Linux privilege escalation auditing tool

listrdpconnections

C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录，从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机

logbackrcedemo

The project is a simple vulnerability Demo environment written by SpringBoot. Here, I deliberately wrote a vulnerability environment where there are arbitrary file uploads, and then use the `scan` attribute in the loghack configuration file to cooperate with the logback vulnerability to implement RCE.

marshalsec

md5bypass

php之md5类型靶场

metasploit-cn-wiki

metasploit中文wiki