5ty4ck Goto Github PK

5ty4ck

Config files for my GitHub profile.

5ty4ck.github.io

antsword

**蚁剑是一款跨平台的开源网站管理工具

awd

awd比赛用到的脚本

bad-pdf

Steal Net-NTLM Hash using Bad-PDF

bestshell

世界上最好用的php大马

blasting_dictionary

爆破字典

cgishell

shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2018-2628

CVE-2018-2628漏洞批量检测脚本

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2019-2725

CVE-2019-2725 命令回显

cve-2019-5736-poc

PoC for CVE-2019-5736

dirbrute

多线程WEB目录爆破工具 [Multi-thread WEB directory blasting tool(with dics inside) ]

ffmpeg-avi-m3u-xbin

freeproxiesspider

Get free IP from xici.com and kuaidaili.com

heartbleed

Heartbleed OpenSSL exploit

http_put_shell

upload shell using http put/copy/move method

iis_shortname_scanner

an IIS shortname Scanner

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

jndiexploit

A malicious LDAP server for JNDI injection attacks

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

msbuild-inline-task

offensivenim

My experiments in weaponizing Nim (https://nim-lang.org/)

pentest_tools

收集一些小型实用的工具

poc-and-exp

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

scarecrow

ScareCrow - Payload creation framework designed around EDR bypass.

seeyonoa_poc

致远OA漏洞验证