doublefast Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

2022-hw-poc

2022 护网行动 POC 整理

awd_toolkit

backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobaltstrike

CobaltStrike's source code

command

红队常用命令速查

creakphpmyadmin

Python实现挂载字典爆破PHPMyAdmin，虽然目前速度不是很快，但还是可以使用的。

crowsec

视频课件和工具分享

ctf

Ctf solutions from p4 team

cuiri

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

cve-2018-2628

cve-2020-0688

cve-2020-0688

dirmap

An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dirsearch

Web path scanner

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

h1ve

An Easy / Quick / Cheap Integrated Platform

hsctf-2019-freshmen

华师CTF 2019 新生赛题目

hsctf-2020-freshmen

华师CTF 2020 新生赛题目

iot-exp

IoT设备相关EXP

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

memcrashed-ddos-exploit

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API

micro8

mysql_sql_bypass_wiki

mysql注入,bypass的一些心得

nps

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

ofx

漏洞批量验证框架

one-lin3r

Gives you one-liners that aids in penetration testing operations

phpsploit

Stealth post-exploitation framework