1f3lse Goto Github PK

ilspy

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

impacket

Impacket is a collection of Python classes for working with network protocols.

inspeckage

Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)

inspur

Inspur vul repo

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以整理出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

invoke-obfuscation

PowerShell Obfuscator

iot-vulhub

IoT 固件漏洞复现环境

iox

Tool for port forward & intranet proxy, just like lcx/ew, but better

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java-unserialization-study

QAQ Just study unserialize vulnerabilities in Java :)

javaagent-tomcat-memshell

使用java agent反序列化注入内存shell

javacodeaudit

Getting started with java code auditing 代码审计入门的小项目

javasearchtools

javasec

自己学习java安全的一些总结，主要是安全审计相关

javaweb-sec

jbossexploit

MSF moudle jboss invoke deploy getshell Exploit & Jboss jmx-console getshell exploit

jce

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

jdwp-shellifier

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jmet

Java Message Exploitation Tool

jndi-injection-exploit

JNDI注入测试工具改版（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndimonitor

一个LDAP请求监听器，摆脱dnslog平台

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

jsbypassav

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsinfo-scan

递归式寻找域名和api。

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)