imklever Goto Github PK

avocado-cloudtest

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

cnvd-c-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

collected-tools

个人收集的一些工具

commando-vm

Complete Mandiant Offensive VM (Commando VM), the first full Windows-based penetration testing virtual machine distribution. The security community recognizes Kali Linux as the go-to penetration testing platform for those that prefer Linux. Commando VM is for penetration testers that prefer Windows. We know that building a Windows penetration testing environment can be tedious - we aim to streamline and simplify this process. Commando VM includes over 140 tools.

common-parent

创客开发-接口

crawlergo-to-xray

crawlergo-to-xray，可以把0Kee-Team crawlergo爬虫爬取的链接推送给长亭xray分析，xray分析后自动调用webhook接口利用server酱实时推送漏洞预警到微信，让你躺着挖漏洞。支持多线程。

cve-2019-2725

CVE-2019-2725 命令回显

droidsslunpinning

Android certificate pinning disable tools

enterprise_project

exchange_proxy

Security proxy server for Exchange server

farmscan_domain_plus

collect domains

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fuzz-wooyun-org

WooYun Fuzz 库

ghidra

Ghidra is a software reverse engineering (SRE) framework

github_799953468_quantumult-x

hvvexploitapply

使用JAVAFX图形化界面检测对HVV中常见的重点CMS系统和OA系统的已公开的漏洞进行验证。

insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

job

git document about job

jsdec

Online JavaScript decoder.Supported sojson v4/Premium/v5 and more

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

juzi

桔子分期项目代码

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kb-security-backend

安全攻防演练平台-后端代码

kenzerdb

automated bug hunting with kenzer

ksubdomain

无状态子域名爆破工具

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

libpku

北京大学课程资料整理

marshalsec

micro8