gcxtx Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

abptts

agent

ambari

Mirror of Apache Ambari

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

barmie

Java RMI enumeration and attack tool.

blasting_dictionary

爆破字典

browser-security-whitepaper-2017

X41 Browser Security White Paper - Tools and PoCs

bug-project-framework

漏洞利用框架模块分享仓库

bugminerintegration

cobra

Source Code Security Audit (源代码安全审计)

coldfusionpwn

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

ctftools

本项目主要搜集一些关于信息安全攻防相关的知识与工具，便于个人的渗透工作。

cve-2018-8120

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7

cve-2019-17564-fastjson-gadget

Basic code for creating the Alibaba FastJson + Spring gadget chain, as used to exploit Apache Dubbo in CVE-2019-17564 - more information available at https://www.checkmarx.com/blog/apache-dubbo-unauthenticated-remote-code-execution-vulnerability

cve-2019-2725

CVE-2019-2725 命令回显

cve-2020-0688

cve-2020-0688

cve-2020-11651-cve-2020-11652-exp

CVE-2020-11651&&CVE-2020-11652 EXP

cve-flow

CVE Data Analysis, CVE Monitor, CVE EXP Prediction Based on Deep Learning. 1999-2020年存量CVE数据分析、监控CVE增量更新、基于深度学习的CVE EXP预测和自动化推送

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

deserlab

Java deserialization exploitation lab.

distrace

Monitoring Tool for Distributed Java Applications

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies from memory and runs them with parameters

dragome-sdk

droid-application-fuzz-framework

Android application fuzzing framework with fuzzers and crash monitor.

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

emailscanner

针对邮件协议POP3、SMTP、IMAP进行账户安全性测试

empire

Empire is a PowerShell and Python post-exploitation agent.

evil-ldap-service

Emulate the evil LDAP service in a vulnerable JNDI lookup

exploit

一个自动化渗透框架