luoam Goto Github PK

mdut

MDUT - Multiple Database Utilization Tools

mind-map

各种安全相关思维导图整理收集

miner_linux

基于ubuntu的挖矿环境

mintcoin

崔棉大师的花式发币法

mometa

🛠 [Beta] 面向研发的低代码元编程，代码可视编辑，辅助编码工具

node-multi-hashing

nosqlattack

NoSQLAttack is an open source Python tool to automate exploit MongoDB server IP on Internet and disclose the database data by MongoDB default configuration weaknesses and injection attacks.

nphot_com

nebulas

ntfsstreams

Viewing NTFS alternate streams in files

offensiverust

Rust Weaponization for Red Team Engagements.

office8570

CVE20178570

osmo-nitb-scripts

Tools for easy deployment of osmocom stack and pentesting gsm networks with LimeSDR Mini

owiener

A Python3 implementation of the Wiener attack on RSA

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

payment

Payment是php版本的支付聚合第三方sdk，集成了微信支付、支付宝支付、招商一网通支付。提供统一的调用接口，方便快速接入各种支付、查询、退款、转账能力。服务端接入支付功能，方便、快捷。

peda

PEDA - Python Exploit Development Assistance for GDB

pentesterspecialdict

渗透测试人员专用精简化字典 Dictionary for penetration testers happy hacker

php-webshells

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

php_mt_seed

php_mt_seed is a PHP mt_rand() seed cracker

phpvuln

🕸️ Audit tool to find common vulnerabilities in PHP source code

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile

polaris

信息搜集与漏洞利用框架

positon_on_nebulas

proxy-demo

Node.js 实现两种 WEB 代理的演示程序。

python

python黑客与一些脚本

python-honeypot

OWASP Honeypot, Automated Deception Framework.

quark-h5

基于vue2 + koa2的 H5制作工具。让不会写代码的人也能轻松快速上手制作H5页面。类似易企秀、百度H5等H5制作、建站工具

r0capture

安卓应用层抓包通杀脚本

ratel

​ ratel(獾) 是由rust开发的红队信息搜集，扫描工具，支持从fofa，zoomeye API查询，主动扫描端口，提取https证书域名，自定义poc。

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。