dashuai785 Goto Github PK

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jsdeliver

llama_index

LlamaIndex (GPT Index) is a project that provides a central interface to connect your LLM's with external data.

localpotato

metron-assets

miscellaneous

百宝箱

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始Kubernetes攻防 🧐

mysqlhoneypot

Use MySQL honeypot to get wechat ID

nextscan

飞刃是一套完整的企业级黑盒漏洞扫描系统，集成漏洞扫描、漏洞管理、扫描资产、爬虫等服务。 拥有强大的漏洞检测引擎和丰富的插件库，覆盖多种漏洞类型和应用程序框架。

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei_gpt

Chat automates Nuclei template generation

phobos

Phobos 是一款红队专用免杀木马生成器，采用 PEM 加密动态嵌入 XOR 的方式生成木马，生成木马可以自定义名称和ICO图标，为了延长免杀时间本工具暂时不开源。

pigsyscall

An implementation of an indirect system call

poc_and_exp

搜集的或者自己写的poc或者exp

pwdbud

一款SRC密码生成工具，尝试top字典无果后，可以根据域名、公司名等因素来生成特定的字典

r-dict

一些自己常用的渗透字典

rasmanpotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

rootthebox

A Game of Hackers (CTF Scoreboard & Game Manager)

rubeus

Trying to tame the three-headed dog.

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

scfproxy

A proxy tool based on cloud function.

securityproduct

开源安全产品源码，IDS、IPS、WAF、蜜罐等

shellcode_separationload

通过文件加载和远程URL加载方式实现Shellcode分离加载

smogcloud

Find cloud assets that no one wants exposed 🔎 ☁️

threatbook-c2

利用微步社区做天然白名单且免杀的远控C2（支持手机电脑）

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

watchvuln

一个高价值漏洞采集与推送服务 | A valueable vulnerability collection and push service

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain