c0okb Goto Github PK

2021hvv_vul

2021hvv漏洞汇总

active-directory-pentest

Windows域渗透学习笔记

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

badcode

恶意代码逃逸源代码 http://payloads.online

black-hat-go

《Black.Hat.Go》中文翻译

c0okb.github.io

c2reverseproxy

一款可以在不出网的环境下进行反向代理及cs上线的工具

changetimestamp

一键修改exe、dll的编译时间、创建时间、修改时间和访问时间

colly

Elegant Scraper and Crawler Framework for Golang

cve-2021-22205

CVE-2021-22205 RCE

cve-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

darkgld

A tool for quickly generating fishing Trojan horse.

developer-books

编程开发相关书籍整理分享，持续更新...

elevatekit

The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.

enscan_go

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

firepwd

firepwd.py, an open source tool to decrypt Mozilla protected passwords

flannel

flannel is a network fabric for containers, designed for Kubernetes

gohacktools

Hacker tools on Go (Golang)

hacking-with-go

Golang for Security Professionals

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

insomnia

The open-source, cross-platform API client for GraphQL, REST, and gRPC.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

ipproxypool

IPProxyPool代理池项目，提供代理ip

javalearnvulnerability

Java漏洞学习笔记 Deserialization Vulnerability

javasec

Java安全☞流下了不会Java的眼泪 : )

jndi-injection-bypass

Some payloads of JNDI Injection in JDK 1.8.0_191+

killdefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

lazy_importer_aav