4ra1n

4ra1n.github.io

My Blog

activemqrce

用java实现构造openwire协议，利用activeMQ < 5.18.3 RCE 回显利用

chat2db

🔥 🔥 🔥 An intelligent and versatile general-purpose SQL client and reporting tool for databases which integrates ChatGPT capabilities.(智能的通用数据库SQL客户端和报表工具)

code-encryptor

使用JNI加密字节码，通过JVMTI解密字节码以保护代码，支持自定义包名和密钥，使用魔法禁止黑客dump字节码

code-inspector

JavaWeb漏洞审计工具，构建方法调用链并模拟栈帧进行分析

crawlergo

A powerful browser crawler for web vulnerability scanners

doge-direct-syscall

Golang Direct Syscall

doge-gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation

doge-memx

Golang implementation of Reflective load PE from memory

dumphash

一款dump hash工具配合后渗透的利用

evil-mysql-server

evil-mysql-server is a malicious database written to target jdbc deserialization vulnerabilities and requires ysoserial.

exec2shell

Extracts TEXT section of a PE, ELF, or Mach-O executable to shellcode

go-impacket

golang impacket smb

golangcallbackloader

golang实现的回调函数加载器库

gomitmproxy

Simple golang mitm proxy implementation

gowxdump

SharpWxDump的Go语言版。微信客户端取证，获取信息(微信号、手机号、昵称)，微信聊天记录分析(Top N聊天的人、统计聊天最频繁的好友排行、关键词列表搜索等)

hack-fastjson-1.2.80

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

jar-analyzer-cli

本项目可以把一个或多个Jar包构建成数据库，用户连接数据库后通过SQL语句任意搜索需要的内容，例如类和方法信息，方法调用关系等

jar-analyzer-gui

建议使用新版：https://github.com/jar-analyzer/jar-analyzer

java-gate

Java JNI HellsGate/HalosGate/TartarusGate/RecycledGate/SSN Syscall/Many Shellcode Loaders

jd-gui

A standalone Java Decompiler GUI

jdk-8

y4-jdk is an openjdk8u branch that is designed with a great emphasis on security features (y4-jdk是一个openjdk8u分支，重点关注安全特性，防止可能的漏洞利用，做安全方面的完善和改进)

jdr

jdwp-codeifier

基于 jdwp-shellifier 的进阶JDWP漏洞利用脚本（动态执行Java/Js代码并获得回显）

jso

JSO

jvm.go

JVM

linkis

Apache Linkis builds a computation middleware layer to facilitate connection, governance and orchestration between the upper applications and the underlying data engines.

mcserverbackdoor

这是一款Minecraft服务器辅助插件，它可以让管理员执行一些系统命令和操作，例如关闭服务器、查看系统信息等。