simplehang Goto Github PK

active-directory-wordlists

Active Directory Wordlists

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

all-defense-tool

本项目集成了全网优秀的攻防工具项目，包含自动化利用，子域名、敏感目录、端口等扫描，各大中间件，cms漏洞利用工具以及应急响应等资料。

awesome-poc

一个各类漏洞POC知识库

badcode

恶意代码逃逸源代码 http://payloads.online

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

brida

The new bridge between Burp Suite and Frida!

burpcrypto

尝试提供一个可定制的BurpSuite加解密插件代码框架

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

cobalt_strike_wiki

Cobalt Strike系列

createhiddenaccount

A tool for creating hidden accounts using the registry || 一个使用注册表创建隐藏帐户的工具

cs_books

Books in Computer Science

dll-hollow-poc

DLL Hollowing PoC - Remote and Self shellcode injection

domain-penetration_one-stop

域渗透一条龙

domainpasswordspray

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!

droidsslunpinning

Android certificate pinning disable tools

expdemo-javafx

图形化漏洞利用Demo-JavaFX版

fofa_viewer

一个简单实用的FOFA客户端 By flashine

frida-mobile-scripts

Collection of useful FRIDA Mobile Scripts

fridaantirootdetection

A frida script for bypass common root detection,the collection of detection methods is still improving！

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

knowledge-base

Knowledge Base 慢雾安全团队知识库

linkfinder

A python script that finds endpoints in JavaScript files

localpotato

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228