schira4396 Goto Github PK

2022-hw-poc

2022 护网行动 POC 整理

amsibypasshookmanagedapi

A new AMSI Bypass technique using .NET ALI Call Hooking.

awesome-python-cn

Python资源大全中文版，包括：Web框架、网络爬虫、模板引擎、数据库、数据可视化、图片处理等，由「开源前哨」和「Python开发者」微信公号团队维护更新。

awesome-python-login-model

😮python模拟登陆一些大型网站，还有一些简单的爬虫，希望对你们有所帮助❤️，如果喜欢记得给个star哦🌟

bankai

Another Go Shellcode Loader using Windows APIs

behinderclientsource

冰蝎客户端源码-V4.0.2

burploaderkeygen

caesar

一个全新的敏感文件发现工具

cve

cve-2017-12149

CVE-2017-12149 JBOSS RCE (TESTED)

cve-2019-0708

3389远程桌面代码执行漏洞CVE-2019-0708批量检测工具(Rdpscan Bluekeep Check)

cve-2020-14645

Weblogic Server CVE-2020-14645 EXP for Python （complete in one step）

cve-2020-25540

ThinkAdmin CVE-2020-25540 poc

cve-2022-22954

CVE-2022-22954 VMware Workspace ONE Access freemarker SSTI 漏洞 命令执行、批量检测脚本、文件写入

dumphash

一款dump hash工具配合后渗透的利用

ekp

empire

Empire is a PowerShell and Python 3.x post-exploitation framework.

frchannel

帆软bi反序列化漏洞利用工具

fuckhoneypot

FuckHoneypot is 去他妈的蜜罐

gobypass

Golang免杀生成工具

hrmstamper

适用于某EHR&HRM的加解密工具，可直接用于sqlmap

httprequest

inscan

边界打点后的自动化渗透工具

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

log4shell

Check, exploit, generate class, obfuscate, TLS, ACME about log4j2 vulnerability in one Go program.

lyinjector

一款功能强大的应用层反汇编代码注入器，实现了DLL注入，ShellCode注入等功能，是一款不错的后渗透利器。 A powerful application layer disassembly code injector that implements DLL injection, ShellCode injection, and other functions, is a good post penetration tool.

moan_honey_pot_urls

X安蜜罐用的一些存在JSonp劫持的API

natbypass

一款lcx在golang下的实现, 可用于内网穿透, 建立TCP反弹隧道用以绕过防火墙入站限制等, A tool for establish reverse tunnel for NAT network environment and proxy, support all functions of lcx.exe

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-book

面向网络安全从业者的知识文库🍃