c0okb Goto Github PK

log4j2-cve-2021-44228

Remote Code Injection In Log4j

lstar

LSTAR - CobaltStrike 综合后渗透插件

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

pdftoword

a little tool change Pdf To Word

penetration_testing_case

用于记录分享一些有趣的案例

pentest_note

渗透测试常规操作记录

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

proxy_pool

Python爬虫代理IP池(proxy pool)

relayx

NTLM relay test.

reverserdp_rce

rezerobypassav

从零开始学免杀

rotateproxy-gai

sharpmapexec

sharprdplog

Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。

shellcodeloader

shellcodeloader

shellcodeseperator

seperating shellcode in order to bypass antivirus

shortpayload

如何将Java反序列化Payload极致缩小

sshtunnel

🚇 Ultra simple SSH tunnelling for Go programs.

udptunnel

Daemon for creating a simple VPN over UDP.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnerable-java

一个基于java开发的漏洞测试环境，其中包括了sql注入，csrf，任意文件上传，越权等等

winapi-redblue

Source codes of Windows API Exploitation for Red and Blue teams from Pentester Academy

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.