sharpbladelab Goto Github PK

asmxlessspy

asmx China Chopper WebShell

blasting_dictionary

爆破字典

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cve-2018-2628

Oracle Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization Remote Command Execution Vulnerability (CVE-2018-2628)

cve-2018-2629

Oracle Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization Remote Command Execution Vulnerability (CVE-2018-2628)

damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera

fartdexfix

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

framework

TiwerPHP

gourdscanv2

被动式漏洞扫描系统

hunter

Hunter作为中通DevSecOps闭环方案中的一环，扮演着很重要的角色，开源之后希望能帮助到更多企业。

js-xss

Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist

lxhtoolhttpdecrypt

Simple Android/iOS protocol analysis and utilization tool

nagascan

NagaScan is a distributed passive scanner for Web application.

nodebridge

node模拟桥

oneforall

OneForAll是一款功能强大的子域收集工具

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack

redis-rce

Redis 4.x/5.x RCE

rhizobia_j

JAVA安全SDK及编码规范

serverscan

ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。

shiro_exploit

Apache Shiro 反序列化漏洞检测与利用工具

shiroscan

Shiro<=1.2.4反序列化，一键检测工具

sslkiller

SSLKiller is used for killing SSL verification functions on Android client side. With SSLKiller, You can intercept app's HTTPS communication packages between the client and server.

tp5-getshell

thinkphp5 rce getshell

weblogicr

Weblogic漏洞一键poc检测~

webshell-detect-bypass

xposedokhttpcat

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。