f1uyu4n Goto Github PK

2019gwctf

awd_ctf_platform

一个简单的AWD训练平台

chaos

A social coding experiment that updates its own code democratically.

chashell

Chashell is a Go reverse shell that communicates over DNS. It can be used to bypass firewalls or tightly restricted networks.

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

fastjsonparty

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

go-common

哔哩哔哩 bilibili 网站后台工程 源码

hashcrack

Search hashes in different website.

how-does-xmanager-encrypt-password

This is a repo to tell you how Xmanager encrypt password.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

invoke-obfuscation

PowerShell Obfuscator

invoke-phant0m

Windows Event Log Killer

jeecg-password-decrypt

jsphorse

JSPHorse Project Backup

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

ms17-010_worawit

MS17-010 zzz_exploit.py modified to allow for reverse shells

offensiveinterview

翻译国外的@WebBreacher的安全/渗透测试/红队面试题，有部分参考作用

oracle_java_shell_client

oracle 10g sys权限通过java执行命令获得一个非交互shell的客户端，通常用于正向连接

pe_to_shellcode

Converts PE into a shellcode

pentest_study

从零开始内网渗透学习

prepare-for-awd

AWD攻防赛脚本集合

qqgroup-visualization

QQ群关系可视化查询3D力导向图

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

scriptdotsh-malwaredevelopment

This repo will contain code snippets for blogs: Malware on Steroids written by me at https://scriptdotsh.com/index.php/category/malware-development/

shortpayload

如何将Java反序列化Payload极致缩小

show-me-password-sqldev-jdev

The "Show me password" is extension for Oracle SQL Developer or Oracle JDeveloper i.e. simple extension (tool) that decrypts all saved (encrypted) password for database connections, application server connection, servers etc. in SQL Developer or JDeveloper.

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

src

日常src平台域名收集

stego-toolkit

Collection of steganography tools - helps with CTF challenges