chek1007 Goto Github PK

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

cbackshell

c语言版本的反弹shell

cdk

📦 Make security testing of K8s, Docker, and Containerd easier.

cve-2021-4034

CVE-2021-4034 1day

cve-2022-0847

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”

deepnude_nowatermark_withmodel

docpatch

A simple script that edits the XML of a macro-enabled Word document (.docm or Word 97 document) to add a reference to a remote stylesheet.

faketoa

TCP IP伪造,建议使用 ubuntu 22.04

falco

Cloud Native Runtime Security

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

gogo

面向红队的, 高度可控可拓展的自动化引擎

hitomi-downloader

:cake: Desktop utility to download images/videos/music/text from various websites, and more.

kscan

Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

murphysec

An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

mysql_fake_server

MySQL Fake Server use to help MySQL Client File Reading and JDBC Client Java Deserialize

office-dde-payloads

Collection of scripts and templates to generate Office documents embedded with the DDE, macro-less command execution technique.

oneforall

OneForAll是一款功能强大的子域收集工具

ptrace

a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志

pyreverse

A Python ReverseShell

qinglong

支持 Python3、JavaScript、Shell、Typescript 的定时任务管理平台（Timed task management platform supporting Python3, JavaScript, Shell, Typescript）

rogue-mysql-server

Rogue MySql Server

rustdesk

An open-source remote desktop, and alternative to TeamViewer.

tcptunnel

A simple TCP port forwarder.

udp-bench

A command line tool which can send packages to UDP server at a configurable speed.

xxxx