kyhvedn Goto Github PK

shellshocker-pocs

Collection of Proof of Concepts and Potential Targets for #ShellShocker

shiro_rce

shiro rce 反序列 命令执行 一键工具

sidtoday

Snowden Archive: The SIDtoday Files

simpleremoter

基于gh0st的远程控制器：实现了终端管理、进程管理、窗口管理、远程桌面、文件管理、语音管理、视频管理、服务管理、注册表管理等功能，优化全部代码及整理排版，修复内存泄漏缺陷，程序运行稳定。此项目初版见：https://github.com/zibility/Remote

some-poc-or-exp

各种漏洞poc、Exp的收集或编写

specucheck

SpecuCheck is a Windows utility for checking the state of the software mitigations against CVE-2017-5754 (Meltdown) and hardware mitigations against CVE-2017-5715 (Spectre)

spring-cloud-function-spel-rce

Spring-cloud-function-SpEL-RCE 批量检测脚本，反弹shell_EXP,欢迎师傅们试用

src-script

挖掘src常用脚本

ssrfmap

Automatic SSRF fuzzer and exploitation tool

ssrfsocks

Creates a SOCK proxy server that transmits data over an SSRF vulnerability

st2-057

St2-057 Poc Example

struts-scan

struts2漏洞全版本检测和利用工具

struts2_check

一个用于识别目标网站是否采用Struts2框架开发的工具demo

teamviewer-dumper

Dump TeamViewer ID and password from memory. Works much better than other tools.

templates

tomcat-weak-password-scanner

醉考拉tomcat后台弱口令扫描器，命令行版+图形界面版。

tools

一些实用的python脚本

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

upload-labs-writeup

upload-labs 上传漏洞靶场的解题方法

useful_script

v3n0m-scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

vfeed

The Correlated CVE Vulnerability And Threat Intelligence Database API

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

vuln

Record some Vulnerabilities

vxscan

python3写的综合扫描工具，主要用来敏感文件探测(目录扫描与js泄露接口)，WAF/CDN识别，端口扫描，指纹/服务识别，弱口令探测，POC扫描，SQL注入等功能

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

w8scan

一款模仿bugscan的漏洞扫描器

waf-bypass

WAF Bypass Cheatsheet

wdscanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署、密码定向破解、社工库查询等功能。

web-security-learning

Web-Security-Learning