akiyamaliet Goto Github PK

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，均为亲测可用的脚本文件，优先更新高危且易利用的漏洞利用脚本，最近添加CVE-2020-1938、CVE-2020-2551、CVE-2019-2618、CVE-2019-6340

exploits

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

githack

A `.git` folder disclosure exploit

gitskills

godzilla

哥斯拉

hoppscotch

👽 Open source API development ecosystem - https://hoppscotch.io

iis_shortname_scanner

an IIS shortname Scanner

impacket

Impacket is a collection of Python classes for working with network protocols.

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

javaserializetools

Java反序列化漏洞利用工具V1.0 Java反序列化相关漏洞的检查工具，采用JDK 1.8+NetBeans8.2开发，软件运行必须安装JDK 1.8或者以上版本。 支持：weblogic xml反序列化漏洞 CVE-2017-10271/CNVD-C-2019-48814/CVE-2019-2725检查。

jdwp-shellifier

jenkins-attack-framework

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jpexs-decompiler

JPEXS Free Flash Decompiler

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

learngit

learnpython

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester

Linux privilege escalation auditing tool

lnkup

Generates malicious LNK file payloads for data exfiltration

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4shell-detector

Detector for Log4Shell exploitation attempts

log4shell-rex

PCRE RegEx matching Log4Shell CVE-2021-44228 IOC in your logs

metasploit-framework

Metasploit Framework

micro8

Gitbook