anyesir Goto Github PK

aicsa

GPT AiCSA(Code security audit)，SAST（Static Application Security Testing，静态应用程序安全测试），JAR security analysis, static vulnerability and vulnerability analysis of various programming language codes

amcsh

A More Comfortable (remote) SHell with full pty support and both reverse / bindport connection mode.

artillery

JAVA 插件化漏洞扫描器，Gui基于javafx。POC 目前集成 Weblogic、Tomcat、Shiro、Spring等。

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

avlist

avList - 杀软进程对应杀软名称

awesome-poc

一个漏洞POC知识库

awesome-redteam

一个攻防知识仓库 Red Teaming and Offensive Security

awesome-windows-kernel-security-development

windows kernel security development

bbscan

A fast vulnerability scanner

behinder

Behinder source code-冰蝎源码

bitexchange

The best Java open source crypto currency exchange platform, bitcoin exchange based on Java | BTC exchange | ETH exchange | digital currency exchange | trading platform | matching trading engine. This project is based on the development of Spring Cloud microservices and can be used to build and secondary development of digital currency exchanges…

blockchain-code-security-audit-using-chatgpt

Accelerate your blockchain security auditing with this Python script leveraging ChatGPT's AI capabilities. Generate comprehensive security audit reports for your smart contracts with ease, including executive summaries, vulnerability assessments, best practices, and testing methodologies.

bt_panel_privilege_escalation

宝塔面板Windows版提权方法

chrome_password_grabber

Get unencrypted 'Saved Password' from Google Chrome

cointrade

cronos-rootkit

Cronos is Windows 10 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

dedecmscan

织梦全版本漏洞扫描

deep-learning-tensorflow

Gathers Tensorflow deep learning models.

dnslogsqlinj

exploitdb

The official Exploit Database repository

exploits

fake-adobeflashplayer

国外版

fake-flash.cn

flash.cn钓鱼页（中文+英文）

fastadmin

基于 ThinkPHP5 和 Bootstrap 的极速后台开发框架，一键生成 CRUD，自动生成控制器、模型、视图、JS、语言包、菜单、回收站。

fastadminenglish

FastAdmin is an easy-to-use Admin Dashboard App for FastAPI/Flask/Django inspired by Django Admin.

filezilla_privilege_escalation

FileZilla Server Interface 加账户脚本

flash-pop

Flash钓鱼弹窗优化版

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gda-android-reversing-tool

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

get_av

Windows杀软在线对比辅助