xiaomingdegithub Goto Github PK

ajpy

android_poke

poke android ,dump dex

app_security

awsome-webshell

webshell样本大合集。收集各种webshell用于webshell分析与发现。——www.shellpub.com

binary-files

EarthWorm/Termite 停止更新

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

cnvd-2021-10543

CNVD-2021-10543：MessageSolution 企业邮件归档管理系统 EEA 存在信息泄露漏洞

cobalt_strike_wiki

Cobalt Strike系列

cve-2017-12615

Tomcat 远程代码执行漏洞 Exploit

cve-2019-0708

dump

cve-2019-2725

CVE-2019-2725 命令回显

dirtycow-exp

编译好的脏牛漏洞（CVE-2016-5195）EXP

dog-tunnel

p2p tunnel,(udp mode work with kcp,https://github.com/skywind3000/kcp)

ew

内网穿透(跨平台)

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kernel-exploits

Various kernel exploits

micro8

Gitbook

mind-map

各种安全相关思维导图整理收集

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

nse_vuln

Nmap扫描、漏洞利用脚本

oneforall

OneForAll是一款功能强大的子域收集工具

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

poc-t

渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework

python

All Algorithms implemented in Python

redis

Redis key-value store (Win32 / Win64 port)

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

scanners-box

A powerful hacker toolkit which has collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.