whojeff Goto Github PK

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

geacon

Practice Go programming and implement CobaltStrike's Beacon in Go

hackeronedb

The unofficial HackerOne disclosure Timeline

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hessian-deserialize-rce

Hession-Deserialize-RCE 反序列化命令执行

hexo-theme-alpha-dust

🌠 Original Futuristic Hexo Theme

hidden_link

检测暗链，外链，hidden link check

homework-of-c-language

C/C++ code examples of my blog.

httpscan

一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR

impacket

Impacket is a collection of Python classes for working with network protocols.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

invoke-obfuscation

PowerShell Obfuscator

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsp-webshell

single file jsp webshell, work on jdk5+

jweevely

a exec jsp shell, simply like weevely php C/S shell.

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kernel-exploits

Various kernel exploits

linux-exploit-suggester

Linux privilege escalation auditing tool

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

listinstalledprograms

List the programs that the current Windows system has installed

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

metasploit-framework

Metasploit Framework

meterpreter_paranoid_mode-ssl

Meterpreter Paranoid Mode - SSL/TLS connections

micro8

mind-map

超详细的渗透测试思维导图

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

mobile-security-framework-mobsf

Mobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing framework capable of performing static analysis, dynamic analysis, malware analysis and web API testing.

ms17-010_worawit

MS17-010 zzz_exploit.py modified to allow for reverse shells