missxq131 Goto Github PK

it_security

java-study-note

javaguide

【Java学习+面试指南】 一份涵盖大部分Java程序员所需要掌握的核心知识。

javasec

自己学习java安全的一些总结，主要是安全审计相关

javaunserializeexploits

jd_seckill

京东秒杀商品抢购，目前只支持茅台抢购，不支持其他商品！

jwt-go

ARCHIVE - Golang implementation of JSON Web Tokens (JWT). This project is now maintained at:

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

k8portscan

跨平台大型网络端口扫描器(支持批量A段/B段/C段/IP列表(TXT)/端口列表,Banner识别比S扫描器加强版更准)

katana

Katana - Automatic CTF Challenge Solver in Python3

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

lazagne

Credentials recovery project

learn-go-with-tests

Learn Go with test-driven development

learn-security-from-0

从0开始学安全，注重实战+技巧的运用，分享各种安全攻防干货，包括但不限于：Web安全、代码审计 、内网渗透、企业安全等。

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

lengjibo.github.io

libc-database

Build a database of libc offsets to simplify exploitation

linux-exploit-suggester

Linux privilege escalation auditing tool

linux-tutorial

《Java 程序员眼中的 Linux》

lnk-trojan

这是一个lnk伪装

log4j-fuzz-head-poc

批量检测log4j漏洞，主要还是批量fuzzz 头

macos-security-and-privacy-guide

Guide to securing and improving privacy on macOS

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malleable-c2-profiles-1

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

masscan

masscan exe

mellow

Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux. Also a Proxifier alternative.

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.