ldbqh Goto Github PK

idatropy

IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速对目标进行安全漏洞检测，比攻击者快一步发现风险漏洞。

laravel-src

基于 LARAVEL 打造的安全应急响应中心平台

lazagne

Credentials recovery project

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

luwu

红队基础设施自动化部署工具

malware-sample-library

Malware sample library.

micro8

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

naiheqiao

open-source x86/x64 usermode anti-anti-debug plugin

nps

一款轻量级、功能强大的内网穿透代理服务器。支持tcp、udp流量转发，支持内网http代理、内网socks5代理，同时支持snappy压缩、站点保护、加密传输、多路复用、header修改等。支持web图形化管理，集成多用户模式。

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc html-poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

php-webshells

Common php webshells. Do not host the file(s) on your server!

pics

Posters, drawings...

pret

Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.

proxy_pool

Python爬虫代理IP池(proxy pool)

py-kms

python-100-days

Python - 100天从新手到大师

python-guide-cn

Python最佳实践指南。 The chinese translation of "Hitchhiker's Guide to Python".

qianghongbao

微信抢红包外挂源码

qiling

Qiling Advanced Binary Emulation framework

quicksand_lite

Command line tool for scanning streams within office documents plus xor db attack