laowang1026 Goto Github PK

log4j2burpscanner

CVE-2021-44228 log4j2 RCE Burp Suite Passive Scanner，can customize the ceye.io api or other apis，including internal networks

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-1

用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件

log4j2scan-2

一款无须借助dnslog且完全无害的log4j2反连检测工具(已有burp插件适配可搭配进行被动扫描)，解析RMI和LDAP协议实现，可用于甲方内网自查

log4j_scan

log4jattacksurface

log4jscan_modify

对接JNDIMonitor的Burp Suite被动扫描插件

loggerplusplus-api-filters

A Collection of Logger++ Filters for Hunting API Vulnerabilities

loginfish

通用登录页面安全控件钓鱼

loginlog_windows

读取登录过本机的登录失败或登录成功的所有计算机信息，在内网渗透中快速定位运维管理人员。

loki

一个轻量级Web蜜罐 - A Little Web Honeypot.🐝🐝🐝

lsassy

Extract credentials from lsass remotely

lstar

LSTAR - CobaltStrike 综合后渗透插件

luwu

红队基础设施自动化部署工具

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

masqueradecmdline

A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.

masscan_to_nmap

基于masscan和nmap的快速端口扫描和指纹识别工具，优化版本(获取标题，页面长度,过滤防火墙)

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

matryoshkadolltool

MatryoshkaDollTool-程序加壳/捆绑工具

memshell

a webshell resides in the memory of java web server

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

momo-code-sec-inspector-java

IDEA静态代码安全审计插件

moneyscope

A Simple Tool to Pull Paid Bounty Scopes for Wide Recon Actvities

moreping

A cdn detector with high speed! 基于Python 多线程+多协程实现高并发查询API接口进行多地Ping Host来确认IP的真实归属。

mscache

a tool to manipulate dcc(domain cached credentials) in windows registry, based mainly on the work of mimikatz and impacket

multiplexing_port_socks5

一款golang写的支持http与socks5的端口复用小工具，并且可以开启socks5代理。

my-re0-k8s-security

:atom: [WIP] 整理整理过去的分享，从零开始的Kubernetes攻防 ...

myexploit

OAExploit一款基于产品的一键扫描工具。

mypsexec

demo PsExec