labixx21 Goto Github PK

arl

ARL官方仓库备份项目：ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

blasting-dictionary

网站后台、文件包含、WebShell等爆破字典！

blasting_dictionary

爆破字典

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

bypasswaf

关于安全狗和云锁的自动化绕过脚本

caihong22

caihongzhifu

无

cloud-custodian

Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

cloudwalker

CloudWalker Platform

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2021-41773_cve-2021-42013

CVE-2021-41773 CVE-2021-42013漏洞批量检测工具

elkeid

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

framescan-gui

FrameScan-GUI 一款python3和Pyqt编写的具有图形化界面的cms漏洞检测框架。

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

godgenesis

A Python3 based C2 server to make life of red teamer a bit easier. The payload is capable to bypass all the known antiviruses and endpoints.

godzillasource

Godzilla4.01 decompile code

goproxy

🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

hikvision

海康威视综合安防平台后渗透利用工具

ihoneybakfilescan_modify

批量网站备份文件扫描器，增加文件规则，优化内存占用

jndiexploit

A malicious LDAP server for JNDI injection attacks

labixx.github.io

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化辅助框架，你的工作从未如此简单快捷。

libra

Libra [ 天秤座 ] | 网站篡改、暗链、死链监测平台

myscripts

一个垃圾桶

nacos-poc

net-deserialize

总结了十篇.Net反序列化文章，持续更新

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.