ghost2097221 Goto Github PK

.net_study

跟.net相关的学习

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

addmemshellsjsp

通过jsp注入valve内存马，可以忽略框架影响，通用tomcat789

apache-tomcat-8.5.68-src

Tomcat8.5.68源码调试IDEA项目

apt-hunter

APT-Hunter is Threat Hunting tool for windows event logs which made by purple team mindset to provide detect APT movements hidden in the sea of windows event logs to decrease the time to uncover suspicious activity

av_evasion_tool

掩日 - 免杀执行器生成工具

blueming

备份文件扫描，并自动进行下载

collection-document

Collection of quality safety articles. Awesome articles.

compiler

In-memory compile java source code and load compiled classes.

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

duckmemoryscan

检测绝大部分所谓的内存免杀马

fastjson_tools

一个垃圾的fastjson反序列化payload生成工具

flycat

使用Java基于Netty+Socks5+TLS实现的代理服务

godzillasource

哥斯拉源码-v3.03-godzilla

goshellcodebypassvt

通过线程注入及-race参数免杀全部VT

hack-fastjson-1.2.80

hackjava

《深入理解Java代码审计》

javasec

Java安全，漏洞分析/挖掘/利用

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

javatools

一些Java编写的小工具。

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jsphorse

Super JSP Webshell

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

ligolo

Ligolo : 用于内网渗透的反向隧道

memorymodule

Library to load a DLL from memory.

memoryshell

JavaWeb MemoryShell Inject/Scan/Killer/Protect Research & Exploring

memoryshell-javaall

收集内存马打入方式

mscan

一款域渗透扫描工具，方便一键自动化、全方位的信息收集及扫描域提权漏洞。

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.