whmsec Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2022-hw-poc

2022 护网行动 POC 整理

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

aquatone

A Tool for Domain Flyovers

awesome-hacker-api-tools

A collection of hacker tools using HackerOne's API

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

binary-learning

滴水逆向初、中级学习笔记，不定时更新，自用仓库，不喜勿喷；感谢滴水，有如此完整体系的学习视频，白嫖党嫖了一波...感谢滴水的老师，听课受益匪浅。

boom

Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具

bug-bounty

list of bug bounty writeups

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cve-2023-21839

Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)

dnscan

domaincollector

Simple tool to gather domains from crt.sh using the organization name

drawio-desktop

Official electron build of diagrams.net

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

getjs

A tool to fastly get all javascript sources/files

getshell

各大平台提权工具

ghostmirror

通过webshell实现的内网穿透工具

gitalk

gitalk

gobypass

Golang免杀生成工具，参考网上已有的免杀方式实现的半自动免杀马生成工具，需要本地安装Golang环境，支持多种参数与方式生成

gowitness

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hack-fastjson-1.2.80

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

image

我的图床

jndiexp

JDNI在java高版本的利用工具

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

mobile-nuclei-templates

my-wordlists