youngcraft Goto Github PK

roputils

A Return-oriented Programming toolkit

rtcp

利用 Python 的 Socket 端口转发，用于远程维护

s7-metasploit-modules

Siemens Simatic S7 Metasploit Modules

s7commwireshark

Automatically exported from http://svn.code.sf.net/p/s7commwireshark/code/trunk/

scada-profinet_network-attack

Masters of IT project, network attacks against Profinet SCADA systems.

scadahub

scada sytem vulnerability hub & exploit & vuln detail

scanners-box

The toolbox of open source scanners - 安全行业从业人员自研开源扫描器合集👻

scap

scapsourcecode

scapy

Scapy Install for Windows with Python 2.7

scapy_zh-cn

Scapy中文使用文档

scrapy-mm

scrapy case for a picture site

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-research-pocs

Proof-of-concept codes created as part of security research done by Google Security Team.

security_w1k1

collect

shadowbrokers-nsa-mirror

https://steemit.com/shadowbrokers/@theshadowbrokers/lost-in-translation # Exploits - **EARLYSHOVEL** RedHat 7.0 - 7.1 Sendmail 8.11.x exploit - **EBBISLAND (EBBSHAVE)** root RCE via RPC XDR overflow in Solaris 6, 7, 8, 9 & 10 (possibly newer) both SPARC and x86. - **ECHOWRECKER** remote Samba 3.0.x Linux exploit. - **EASYBEE** appears to be an MDaemon email server vulnerability - **EASYFUN** EasyFun 2.2.0 Exploit for WDaemon / IIS MDaemon/WorldClient pre 9.5.6 - **EASYPI** is an IBM Lotus Notes exploit that gets detected as Stuxnet - **EWOKFRENZY** is an exploit for IBM Lotus Domino 6.5.4 & 7.0.2 - **EXPLODINGCAN** is an IIS 6.0 exploit that creates a remote backdoor - **ETERNALROMANCE** is a SMB1 exploit over TCP port 445 which targets XP, 2003, Vista, 7, Windows 8, 2008, 2008 R2, and gives SYSTEM privileges (MS17-010) - **EDUCATEDSCHOLAR** is a SMB exploit (MS09-050) - **EMERALDTHREAD** is a SMB exploit for Windows XP and Server 2003 (MS10-061) - **EMPHASISMINE** is a remote IMAP exploit for IBM Lotus Domino 6.6.4 to 8.5.2 - **ENGLISHMANSDENTIST** sets Outlook Exchange WebAccess rules to trigger executable code on the client's side to send an email to other users - **EPICHERO** 0-day exploit (RCE) for Avaya Call Server - **ERRATICGOPHER** is a SMBv1 exploit targeting Windows XP and Server 2003 - **ETERNALSYNERGY** is a SMBv3 remote code execution flaw for Windows 8 and Server 2012 SP0 (MS17-010) - **ETERNALBLUE is** a SMBv2 exploit for Windows 7 SP1 (MS17-010) - **ETERNALCHAMPION** is a SMBv1 exploit - **ESKIMOROLL** is a Kerberos exploit targeting 2000, 2003, 2008 and 2008 R2 domain controllers - **ESTEEMAUDIT** is an RDP exploit and backdoor for Windows Server 2003 - **ECLIPSEDWING** is an RCE exploit for the Server service in Windows Server 2008 and later (MS08-067) - **ETRE** is an exploit for IMail 8.10 to 8.22 - **ETCETERABLUE** is an exploit for IMail 7.04 to 8.05 - **FUZZBUNCH** is an exploit framework, similar to MetaSploit - **ODDJOB** is an implant builder and C&C server that can deliver exploits for Windows 2000 and later, also not detected by any AV vendors - **EXPIREDPAYCHECK** IIS6 exploit - **EAGERLEVER** NBT/SMB exploit for Windows NT4.0, 2000, XP SP1 & SP2, 2003 SP1 & Base Release - **EASYFUN** WordClient / IIS6.0 exploit - **ESSAYKEYNOTE** - **EVADEFRED** # Utilities - **PASSFREELY** utility which "Bypasses authentication for Oracle servers" - **SMBTOUCH** check if the target is vulnerable to samba exploits like ETERNALSYNERGY, ETERNALBLUE, ETERNALROMANCE - **ERRATICGOPHERTOUCH** Check if the target is running some RPC - **IISTOUCH** check if the running IIS version is vulnerable - **RPCOUTCH** get info about windows via RPC - **DOPU** used to connect to machines exploited by ETERNALCHAMPIONS - **NAMEDPIPETOUCH** Utility to test for a predefined list of named pipes, mostly AV detection. User can add checks for custom named pipes.

sharly

shellshock_scanner

Python Scanner for "ShellShock" (CVE-2014-6271)

smod

MODBUS Penetration Testing Framework

spiderkeeper

scrapy爬虫管理界面/a scrapy admin ui/open source scrapinghub

springfestivalwxrobot

春节自动回复机器人，你是不是被春节铺天盖地的群发消息淹没了，来一口机器人，帮你解决一切问题

sqlipy

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

srop-poc

starlink-wifi-gen2

Public GPLv2 release of 2nd generation Starlink Wifi Router Code

syzkaller

syzkaller is an unsupervised, coverage-guided Linux system call fuzzer

tcp_exploit

Off-Path TCP Exploit: How Wireless Routers Can Jeopardize Your Secret

thezoo

A repository of LIVE malwares for your own joy and pleasure

thuthesis

LaTeX Thesis Template for Tsinghua University

trinity

Linux system call fuzzer

v8_exp