yardian Goto Github PK
Type: User
Type: User
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
2021 hw
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等
an awesome list of honeypot resources
Web基础漏洞,计算机网络,操作系统,应急响应,代码审计,算法等
Block IP by reset tcp connection.
XSS平台 CTF工具 Web安全工具
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
白阁文库是白泽Sec安全团队维护的一个漏洞POC和EXP公开项目
📦 Make security testing of K8s, Docker, and Containerd easier.
DFA Sensitive Words Filter
一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗
应急响应实战笔记,一个安全工程师的自我修养。
Exploit_Scripts
Web Pentesting Fuzz 字典,一个就够了。
检测敏感词 detect sensitive words
emergency response toolkit
hack tools
Getting started with java code auditing 代码审计入门的小项目
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
《Golang学习资源大全-只有Go语言才能改变世界》Only Golang Can Change The World.
本系统是对Web中间件和Web框架进行自动化渗透的一个系统,根据扫描选项去自动化收集资产,然后进行POC扫描,POC扫描时会根据指纹选择POC插件去扫描,POC插件扫描用异步方式扫描.前端采用vue技术,后端采用python fastapi.
linux-kernel-exploits Linux平台提权漏洞集合 https://www.sec-wiki.com
LinuxCheck - 应急响应实用脚本
一个整合国内多个直播平台内容的网站(后端)
用友NC TestServlet远程命令执行 / Code By:Tas9er
在线漏洞平台
记录自己写的工具和学习笔记
Web Security Technology & Vulnerability Analysis Whitepapers
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.