yq9721 Goto Github PK

ace-builds

Packaged version of Ace code editor

ansible-role-cis-amazon-linux2

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

centos-cis-benchmark

CIS CentOS Linux 7 Benchmark

ctftraining

CTF Training 经典赛题复现环境

cve-2021-3156

cve-2021-3157

dom4j

flexible XML framework for Java

dubbo-exp

Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。

fastjson

Fastjson姿势技巧集合

gittest

11111

guns-vip

guns-vip-new

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jd_kill

京东茅台懂得都懂 main分支是新版本，old分支是docker之前的版本

jndiexploit

A malicious LDAP server for JNDI injection attacks

ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

mybatis-generator-nodollar

mybatis generator 生成配置文件，去掉order by sql拼接

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

redteam_blueteam_hw

红蓝对抗以及护网相关工具和资料，内存shellcode（cs+msf）查杀工具

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

viper

Redteam operation platform with webui 图形化红队行动辅助平台

wxappunpacker

小程序反编译(支持分包)

yaml-payload

Spring Cloud SnakeYAML 反序列化一键注入cmdshell和reGeorg

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.