bmf4ck Goto Github PK
Type: User
Type: User
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.
渗透测试☞经验/思路/总结/笔记
A Linux Kernel Module that adds a backdoor to your system
BEURK Experimental Unix RootKit
Generate BloodHound compatible JSON from logs written by ldapsearch BOF and pyldapsearch
Bruteforce database
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
Apache Log4j 远程代码执行
Empire is a PowerShell and Python post-exploitation agent.
Decrypted content of eqgrp-auction-file.tar.xz
Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
Miscellaneous exploit code
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.
Reconnaissance tool for GitHub organizations
2018年初整理的一些内网渗透TIPS,后面更新的慢,所以公开出来希望跟小伙伴们一起更新维护~
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)
Linux privilege escalation auditing tool
linux-kernel-exploits Linux平台提权漏洞集合
Gitbook
各种安全相关思维导图整理收集
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
自己收集整理自用的字典
A ton of helpful tools
:hammer: A modern multiple reverse shell sessions manager written in go
PowerSploit - A PowerShell Post-Exploitation Framework
PRISM is an user space stealth reverse shell backdoor, written in pure C.
Tool for issuing manual LDAP queries which offers bofhound compatible output
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.