yichen-eric-yang Goto Github PK

apple_bleee

Apple BLE research

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

autosploit

Automated Mass Exploiter

awesome-cellular-hacking

Awesome-Cellular-Hacking

awesome-honeypots

an awesome list of honeypot resources

burpfakeip

一个用于伪造ip地址进行爆破的Burp Suite插件

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

caldera

Scalable Automated Adversary Emulation Platform

cve-2021-3156

cve-exploits

PoCs for public CVE's I have been working on.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

dbj

大宝剑-信息收集和资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

empire

Empire is a PowerShell and Python post-exploitation agent.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

fragattacks

friendly-enigma

A notebook for Pentest training

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

github

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can used to bypass local security restrictions in misconfigured systems

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

hacktheboxwriteups

Writeups for the machines on ethical hacking site Hack the Box

hash-identifier

hping

hping network tool

impacket

Impacket is a collection of Python classes for working with network protocols.

iot-malware

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code

jabberjaw

With JabberJaw, convert any OpenWrt compatible device in Hak5 Shark Jack and make your own portable network attack device.

learn_by_doing

Learn TestPlan

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-smart-enumeration

Linux enumeration tool for pentesting and CTFs with verbosity levels