kyhvedn Goto Github PK

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

fuzzdb-1

一个fuzzdb扩展库

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

github-search

Tools to perform basic search on GitHub.

goby-poc

439个goby poc，可能会有重复自行判断，来源于网络收集的Goby&POC，实时更新。

greyhame-2017

知识星球"灰袍技能" 2017 精华

h3c-pt-tools

Huawei/H3C/HP Penetration Testing Tools

hack_tools_for_me

自己为了方便收集的小工具

httpscan

一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

icsecurity

Industrial control Security Tool

interview_python

关于Python的面试题

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javaserializetools

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 2017-12-30： 添加 weblogic xml反序列化漏洞 CVE-2017-10271

javatimeagent

fix time for java application using javaAgent

jboss-_cve-2017-12149

CVE-2017-12149 jboss反序列化 可回显

jdwp-shellifier

jenkins_unauthenticated_remote_code_execution

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

jsencrypter

一个用于加密传输爆破的Burp Suite插件

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kms-server

a docker image for kms

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

lazagne

Credentials recovery project

lfi-labs

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

lfifreak

A unique automated LFi Exploiter with Bind/Reverse Shells

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester