Giter Club home page Giter Club logo

b1ngda0's Projects

java-sec-code icon java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

javacodeaudit icon javacodeaudit

Getting started with java code auditing 代码审计入门的小项目

javasec icon javasec

a rep for documenting my study, may be from 0 to 0.1

javathings icon javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jndi-injection-exploit-plus icon jndi-injection-exploit-plus

40+ Gadgets(More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

jndiexploit-1 icon jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

joomlascan icon joomlascan

A free software to find the components installed in Joomla CMS, built out of the ashes of Joomscan.

jsfinder icon jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

kerbrute icon kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernel-mii icon kernel-mii

Cobalt Strike (CS) Beacon Object File (BOF) foundation for kernel exploitation using CVE-2021-21551.

keymousego icon keymousego

类似按键精灵的鼠标键盘录制和自动化操作 模拟点击和键入 | automate mouse clicks and keyboard input

mailsniper icon mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

memoryshelllearn icon memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

morefind icon morefind

一款用于快速导出URL、Domain和IP的小工具

mscan icon mscan

一款域渗透扫描工具，方便一键自动化、全方位的信息收集及扫描域提权漏洞。

mssql-fileless-rootkit-warsqlkit icon mssql-fileless-rootkit-warsqlkit

Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OACreate stored procedure’lerinin olmadığı bir MSSQL sunucusunun “sa” hesabını ele geçirmişsek, o sisteme girmekten vaz mı geçeceğiz? Tabii ki vazgeçmememiz gerekiyor. Bu makale “sa” hesabının yakalandığı ve “xp_cmdshell”, “sp_OACreate”, “sp_OAMethod” vb. prosedürlerin hiç birinin çalışmadığı bir senaryo düşünülerek kaleme alınmıştır.

myexploit icon myexploit

OAExploit一款基于产品的一键扫描工具。

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.