devilmaycrying Goto Github PK

crossc2

generate CobaltStrike's cross-platform payload

crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

ctf_ics_traffic

工控CTF比赛工具，各种网络数据包处理脚本

ctf_web

a project aim to collect CTF web practices .

custom-nuclei-templates

cve-2018-7600-drupal-rce

CVE-2018-7600 Drupal RCE

cve-2019-7238

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0

cve-2021-21972

CVE-2021-21972 Exploit

cve-reverse

ddddocr

带带弟弟 通用验证码识别OCR pypi版

decodeobfuscator

免安装一键还原Obfuscator混淆过的代码

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

defendercheck

Identifies the bytes that Microsoft Defender flags on.

devilmaycrying.github.io

rm -rf /*

dirmap

An advanced web directory scanning tool

discoverbrodomain

前渗透信息探测工具集-旁站关联域名采集

doge-srdi

Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode

dorabox

droiddrops

梳理下自己之前写过的文章

emergency

应急相关内容积累

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

fake-flash.cn

www.flash.cn 的钓鱼页，中文+英文

faketoa

Fake IP sources using Linux's BPF feature

fastjson-

Fastjson姿势技巧集合

fastjson-1.2.47-rce

Fastjson <= 1.2.47 远程命令执行漏洞利用工具及方法

fastjson-blacklist

fastjson1.2.62-rce

来源于jackson-CVE-2020-8840，需要开autotype

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fastwhatwebsearch

FastWhatWebSearch是一个能够支持搜索whatweb工具结果的一个微型平台。