wangyi0127 Goto Github PK

cve-2019-2725

CVE-2019-2725 命令回显

cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

cve-2020-1938

CVE-2020-1938

cve-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

cve-2022-0847

CVE-2022-0847

cve-2022-25636

CVE-2022-25636

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

dfir-win

应急响应时收集Windows机器信息

dictionary

user/name/pass/web/file

dirpath_list

Dirpath_List 目录扫描字典

domain-penetration_one-stop

域渗透一条龙

dongtai-agent-java

“火线～洞态IAST”是一款专为甲方安全人员、代码审计工程师和0 Day漏洞挖掘人员量身打造的辅助工具，可用于集成devops环境进行漏洞检测、作为代码审计的辅助工具和自动化挖掘0 Day。

e-cology

e-cology OA_Beanshell_RCE

earthworm

Tool for tunnel

easyxsspayload

XssPayload List . Usage:

ecapture

capture SSL/TLS text content without CA cert using eBPF.

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

ew

内网穿透(跨平台)

exp

收集各种各样的exp

exp-collect

fastir_artifacts

Live forensic artifacts collector

fastjsonscan

fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。

fileleak

又一款敏感文件泄漏检测工具

firekylin

🔥火麒麟-网络安全应急响应工具(系统痕迹采集)Cybersecurity emergency response tool.

foremost

Compile foremost for windows so it can run without cygwin. Check README for instruction to compile for windows.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fuzz_dic

参数 | 字典 collections

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。