wsfengfan Goto Github PK

reverse_dns_shell

A python reverse shell that uses DNS as the c2 channel

reversetcpshell

PowerShell ReverseTCP Framework

rogue-mysql-server

MySQL fake server for read files of connected clients

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securitytraceability

网络安全溯源指南 v1.0 （黑客溯源指南）

shellcode_launcher

Shellcode launcher utility

shodan_mysql

改轮子，造轮子

showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online一个非常适合IT团队的在线API文档、技术文档工具

shr3dkit

Red Team Tool Kit

snippet

code snippet

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

suctf-2019

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

taowu-cobalt-strike

test

123-test-321-bur-p-2.0

tomcat-cluster-session-sync-exp

tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是session集群同步的洞！

tomcat-weak-password-scanner

醉考拉tomcat后台弱口令扫描器，命令行版+图形界面版。

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

waf-bypass

WAF Bypass Cheatsheet

weblogicscanlot

WeblogicScanLot系列，Weblogic漏洞批量检测工具，V2.2

webshell

This is a webshell open source project

webshell-1

这是一个WebShell收集项目

wfuzz

Web application fuzzer

windowsexploits

Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.

winpwnage

💻 Elevate, UAC bypass, privilege escalation, dll hijack techniques

wooyun-payload

从wooyun中提取的payload，以及burp插件

wsfengfan.github.io

xsspy

XssPy - Web Application XSS Scanner

xsstrike

Most advanced XSS scanner.