vjingbi Goto Github PK

hyperledger

区块链3.0 -> 超级账本hyperledger fabirc教程 v1.1

imonitor

iMonitor（冰镜 - 终端行为分析系统）

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

invoke-x64dbg-loaddll

调用x64dbg中的loadll.exe白加黑示例代码

ipranges

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft (Azure), Oracle (Cloud), DigitalOcean, GitHub, Facebook (Meta), Twitter, Linode and Telegram with daily updates.

javascript-obfuscator

A powerful obfuscator for JavaScript and Node.js

jpgtomalware

It embeds the executable file or payload inside the jpg file. The method the program uses isn't exactly called one of the steganography methods. For this reason, it does not cause any distortion in the JPG file. The JPG file size and payload do not have to be proportional.The JPG file is displayed normally in any viewing application or web application. It can bypass various security programs such as firewall, antivirus. If the file is examined in detail, it is easier to detect than steganography methods. However, since the payload in the JPG file is encrypted, it cannot be easily decrypted. It also uses the "garbage code insertion/dead-code insertion" method to prevent the payload from being caught by the antivirus at runtime.

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

jxwaf

JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的web应用防火墙

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

killdefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

killing-the-bear

Repository and archive for Killing The Bear Gitbook

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat、Struts2系列等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike 3.X-4.0

likeyun_ylb

引流宝的主要用途就是辅助基于微信私域流量的获取工作，可以减轻人力，有效降低资源损失、流量流失的几率。这是一个开源、免费、活码管理平台，便于协助自己、他人进行微信私域流量资源获取，更大化地进行营销推广活动！降低运营成本，提高工作效率，获取更多资源。

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

logontracer

Windows系统安全登录日志分析工具logonTracer汉化修正版

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

m3u8_downloader

m3u8（HLS流）下载，实现了AES解密、合并、多线程、批量下载

maccms10

苹果cms-v10,maccms-v10,开源CMS,内容管理系统,视频分享程序,分集剧情程序,网址导航程序,新闻程序,漫画程序,图片程序

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

mangle

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

metasploit-framework

Metasploit Framework

micro8

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mimikatz

A little tool to play with Windows security

ms17-010

MS17-010

msdt-follina

Codebase to generate an msdt-follina payload