simolin Goto Github PK

f5-steganography

F5 steganography

fakexposed

Hide xposed, root, file redirection, etc.

fart

ART环境下自动化脱壳方案

fastjson-blacklist

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

files

各种文件存储分享

firmware-analysis-toolkit

Toolkit to emulate firmware and analyse it for security vulnerabilities

fscan

一款内网扫描工具，方便一键大保健~

get_av

Windows杀软在线对比辅助

ghidra_v850

Ghidra support for Renesas V850 MCUs

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

hide-my-applist

An Xposed module to intercept applist detections

iboot

Source code for a core component of the iPhone's operating system

impacket-examples-windows

The great impacket example scripts compiled for Windows

inscan

边界打点后的自动化渗透工具

internet-industry-terms-generator

互联网黑话生成器，一款能熟练应用“赋能、抓手、闭环、沉淀、打通”等词汇的文章生成器

iocs-idps

This repository will hold PCAP IOC data related with known malware samples (owner: Bryant Smith)

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

joy

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速对目标进行安全漏洞检测，比攻击者快一步发现风险漏洞。

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

landraydes

蓝凌OA的前后台密码的加解密工具

lcyscan

luyten

An Open Source Java Decompiler Gui for Procyon