asdfkj1 Goto Github PK

ctf_challenges

适用于一线安服的ctf培训题目，全docker环境一键启动

custom-logger

cve-2019-0193

Apache Solr DataImport Handler RCE

cve-2019-0708_bluekeep_rce

it works on xp (all version sp2 sp3)

cve-2019-2725

CVE-2019-2725 命令回显

cve-2019-5736-poc

PoC for CVE-2019-5736

cve-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

cve-2022-26138

Atlassian Questions Hardcoded Password (CVE-2022-26138)

cve-2023-0386

CVE-2023-0386在ubuntu22.04上的提权

ddos-toll

A tool that performs HULK HTTP flood, Ping of Death, UDP flood, SNMP, Smurf ICMP, and Slowloris attacs

digital-privacy

一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

eventlogmaster

Cobalt Strike插件 - RDP日志取证&清除

evil_minio

EXP for CVE-2023-28434 MinIO unauthorized to RCE

example-hello-world

fastjson

Fastjson姿势技巧集合

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

go_proxy_pool

无环境依赖开箱即用的代理IP池

godpotato

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hawkeye

GitHub 泄露监控系统(GitHub Sensitive Information Leakage Monitor Spider)

homework-of-python

Python codes of my blog.

huakai.github.io

全球鹰实验室技术文章

impacket

Impacket is a collection of Python classes for working with network protocols.

incloud

运行于GitHub Actions 的仓库中自动化、自定义和执行软件开发工作流程，可以自己根据喜好定制功能，InCloud已经为您定制好了八种针对网段和域名的不同场景的信息收集与漏洞扫描流程。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javasec

a rep for documenting my study, may be from 0 to 0.1

javaweb-sec

攻击Java Web应用-[Java Web安全]