ziyuanmohun Goto Github PK

accomplice

Tools for discovery and abuse of COM hijacks

aheadlib-x86-x64

hijack dll Source Code Generator. support x86/x64

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

bloodhound

Six Degrees of Domain Admin

burpfakeip

一个用于伪造ip地址进行爆破的Burp Suite插件

bypassav

免杀shellcode加载器

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

clash

A rule based proxy in Go.

cobalt-strike-cheatsheet

Some notes and examples for cobalt strike's functionality

cobaltstrikesource

Cobaltstrike4.1 Source

cve-2019-2890

CVE-2019-2890 Exploit for WebLogic with T3

cve-2021-26855

PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github

cve-2023-0386

CVE-2023-0386在ubuntu22.04上的提权

cve-2023-4863

datacon2019-malicious-code-dataset-stage1

earthworm

EarthWorm

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

gongfang

《攻防映射图：ATT&CK攻击技术与SHIELD防御技术》 详情：https://mp.weixin.qq.com/s/3-GKn9Vq92VcH-TjjbmDYQ

impacket

Impacket is a collection of Python classes for working with network protocols.

jdsrc-small-classroom

京东SRC小课堂系列文章

jndiexploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jndiexploit-1.3

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kekeo

A little toolbox to play with Microsoft Kerberos in C

libprocesshider

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

linux_kernel_hacking

Linux Kernel Hacking

marshalsec

micro8

Gitbook