wule108 Goto Github PK

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

litehttp

LiteHTTP is an HTTP bot that is being programmed in C#, on the .NET 2.0 dependency.

log4j-poc

LOG4J漏洞批量检测工具 -- 红队工具 -- 护网必备 -- Redteam --

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-1

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-2

log4j2 burp扫描插件 | 兼容各种格式的请求 | 漏报少 | 标识性Payload | 绕waf

log4j2scan-3

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4jattacksurface

lxhtoolhttpdecrypt

Simple Android/iOS protocol analysis and utilization tool

marshalsec

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mirai-source-code

Leaked Mirai Source Code for Research/IoC Development Purposes

monkey

Infection Monkey - An automated pentest tool

msdt-follina

Codebase to generate an msdt-follina payload

muhstik

mysqlmonitor

MySQL实时监控工具（代码审计、黑盒测试辅助工具）

nemo_go

Nemo是用来进行自动化信息收集的一个简单平台，通过集成常用的信息收集工具和技术，实现对内网及互联网资产信息的自动收集，提高隐患排查和渗透测试的工作效率，用Go语言完全重构了原Python版本。

nglite

A major platform RAT Tool based by Blockchain/P2P.Now support Windows/Linux/MacOS

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

pcshare

pcshare-1

PCShare是一款强大的远程控制软件，可以监视目标机器屏幕、注册表、文件系统等。

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

penetrationtest-tips

渗透测试，渗透测试小技巧，渗透测试Tips，师傅们跟我一起维护更新吧~

pentest

内网渗透中的一些工具及项目资料

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker