xiaoshuier Goto Github PK

cs2modrewrite

Convert Cobalt Strike profiles to modrewrite scripts

ctf-wiki

CTF Wiki Online

ctfr

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

cve-2018-2628

cve-2019-0841

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

cve-2019-3396

dictionaries

Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks

droidsslunpinning

Android certificate pinning disable tools

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

esd

Enumeration sub domains(枚举子域名)

extension-boilerplate

⚡️ A template for building cross browser extensions for Chrome, Opera & Firefox.

extract-relative-url-heapsnapshot

Extract relative urls from a heap snapshot

farmscan_domain_plus

collect domains

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fastjson_rce_tool

fastjson命令执行利用工具， remote code execute

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdata

Fuzzing resources for feeding various fuzzers with input.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzywuzzy

Fuzzy String Matching in Python

gdbgui

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran. Run gdbgui from the terminal and a new tab will open in your browser.

get-graphql-schema

Fetch and print the GraphQL schema from a GraphQL HTTP endpoint. (Can be used for Relay Modern.)

git_extract

提取远程 git 泄露或本地 git 的工具

gixy

Nginx configuration static analyzer

hideshell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

hls.js

JavaScript HLS client using Media Source Extension

htshells

Self contained htaccess shells and attacks

idcardgenerator

身份证图片生成工具 generate an id card picture

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

js-beautify

Beautifier for javascript