old-hansen Goto Github PK

api-gateway-demo-sign-java

aliyun api gateway request signature demo by java

area_support

地区服务（省市区三级联动接口、区域编号统一服务）

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

bestshell

世界上最好用的php大马

bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

code

Source Code for Go In Action examples

crossc2

generate CobaltStrike's cross-platform payload

cryptozombie-lessons

Lesson content for cryptozombies.io

cve-2021-22214

Gitlab CI Lint API未授权 SSRF漏洞 CVE-2021-22214

cve-2022-24112

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

excelutils

使用POI来对excel进行操作

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

explorer

A light explorer for Cosmos-based Blockchains.

fuzzdicts

渗透测试路径字典，爆破字典。内容来自互联网和实战积累。

goby2oneforall

Goby2OneForAll

gvr-android-sdk

Google VR SDK for Android

httputil

Easily perform HTTP requests in Java

jsptrojanhorse

JSP免杀木马，仅用于安全测试

mimikatz

A little tool to play with Windows security

openwrtinvasion

Root shell exploit for several Xiaomi routers: 4A Gigabit, 4A 100M, 4, 4C, 3Gv2, 4Q, miWifi 3C...

powercat

netshell features all in version 2 powershell

pypi_teadao

security_w1k1

collect

spring4shell-poc

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

src-script

挖掘src常用脚本

wxappunpacker

微信小程序本地应用包逆向工具

xssh

xxeinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.