forlin Goto Github PK

jmet

Java Message Exploitation Tool

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

laravel-poc-cve-2018-15133

PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

lazagne

Credentials recovery project

lxhtoolhttpdecrypt

HTTPDecrypt

nodejs-red-team-cheat-sheet

NodeJS Red-Team Cheat Sheet

pentest

渗透测试用到的东东

phishlulz

project

rdpy

Remote Desktop Protocol in Twisted Python

recaptcha

A burp extender that reconginze CAPTCHA and use for intruder payload

redis-rogue-getshell

利用redis 4.x/5.x master/slave 模式getshell

rop_step_by_step

一步一步学ROP

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_circle_2017

sh00t

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

shadowbroker

shadowsocksr

Python port of ShadowsocksR

ssrfmap

Automatic SSRF fuzzer and exploitation tool

sublist3r

Fast subdomains enumeration tool for penetration testers

vulhub

Docker-Compose file for vulnerability environment

vulnpoc

Vulnerability Verification Environment based on Docker

w9scan

学习python，学习黑客

web-security-learning

Web-Security-Learning

xss_html_dom

HTML DOM事件对象下的XSS

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

zimbra_poc

Zimbra XXE+SSRF+UPLOAD Poc