devilmaycrying Goto Github PK

s9mf-php-webshell-bypass

为方便WAF入库的项目 | 分享PHP免杀大马 | 菜是原罪 | 多姿势(假的就一个)

safety-project-collection

收集一些比较优秀的开源安全项目，以帮助甲方安全从业人员构建企业安全能力。

scfproxy

A little proxy tool based on Tencent Cloud Function Service.

scripts

主要是收集自己编写、改造的一些小的脚本:ip-reverse-to-domain| findSubDomains| Shodan| ZoomEye| Censys|ecshop|vul-info-collect|cve_for_today|telnet

secdictionary

实战沉淀字典

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_code

渗透测试常用代码

sensitive_word_filtering

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

sharptoolsaggressor

内网渗透中常用的c#程序整合成cs脚本，直接内存加载。持续更新~

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

shiro_exploit_env

Apache Shiro Java Analysis and Utilization of Deserialization Vulnerabilities

shiroexploit_gui

ShiroExploit GUI版本

shiroscan

Shiro RememberMe 1.2.4 反序列化漏洞图形化检测工具(Shiro-550)

shiroscan-1

Shiro<=1.2.4反序列化，一键检测工具

shodanfy.py

Get ports,vulnerabilities,informations,banners,..etc for any IP with Shodan (no apikey! no rate-limit!)

springbootscan

扫描网站是否存在SpringBoot API信息泄漏或阿里云存储OSSKEY泄漏

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

src-experience

工欲善其事，必先利其器

src-script

挖掘src常用脚本

ssrf_ex

SSRF漏洞测试、利用 SSRF vulnerability testing and utilization

ssrfmap

Automatic SSRF fuzzer and exploitation tool

superproxy

基于golang协程实现的超级代理，真正优雅使用代理池

team-ares

Repository for all TeamARES POC code and tools.

thor

HTTP Sniffer/Capture on iOS for Network Debug & Inspect.

tools

一些实用的python脚本

trackerslist

None

trishul

Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vulnerabilities and teach how to exploit them.

vbulletin-5.1.x-preauth-rce

[Exploit] vBulletin 5.1.x - PreAuth Remote Code Execution

vbulletin_5.x-tab_panel-rce

(CVE-2020-17496) vBulletin 5.x Widget_tabbedcontainer_tab_panel RCE Vuln Test script