ttstormxx Goto Github PK

cve-2022-22947

django-file-upload-download

Demo code examples for uploading and downloading files using Django, including file renaming, Ajax upload and streaming of large files.

doraemon

渗透辅助 BurpSuite 小插件

ew

内网穿透(跨平台)

exploitdb

The official Exploit Database repository

f8x

红/蓝队环境自动化部署工具

fbctf

Platform to host Capture the Flag competitions

fofa_gui

FOFA GUI工具，支持存活检测，icon_hash转换，备份扫描

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

geeker-tips

Geeker 杂记

github-action-test

测试github-action

goscan

GoScan是采用Golang语言编写的一款分布式综合资产管理系统，适合红队、SRC等使用

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

hackbar2.1.3

the free firefox extions of hackbar v2.1.3 v2.2.9 v2.3.1,hackbar 插件未收费的免费版本。适用于chrome浏览器的HackBar-v2.2.6.zip,HackBar-v2.3.1.zip

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hfish

🍯 A Most Convenient Honeypot Platform. 🐝🐝🐝 🐝🐝

howto-make-more-money

程序员如何优雅的挣零花钱，2.0版，升级为小书了。Most of this not work outside China , so no English translate

html-css-only

漂亮的 CSS 系列~

hvvault

梳理【护网高利用率POC】并集成Nuclei模板仓库，针对解决网上同一资产漏洞一键检测工具参次不齐问题。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

java-rce-echo

Java RCE 回显测试代码

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jjjjjjjjjjjjjs

爬网站JS文件，自动fuzz api接口，指定api接口（针对前后端分离项目，可指定后端接口地址），回显api响应

jndi-exploit-kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

jndiexploit

A malicious LDAP server for JNDI injection attacks

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

jundeadshell

Java内存马注入工具