yzkc Goto Github PK

2021_hvv

2021 hw

2022-hw-poc

2022 护网行动 POC 整理

antsword

**蚁剑是一款跨平台的开源网站管理工具

apktoolbox

azscanner

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

bbscan

A tiny Batch weB vulnerability Scanner

behinder

“冰蝎”动态二进制加密网站管理客户端

bluekeep

Public work for CVE-2019-0708

bruteforce_py

all bruteforces with python, ssh bf, wordpress bf, cpanel bf, mysql bf, etc

burplugin-java-rce

******本软件仅限用于学习交流禁止用于任何非法行为****** 本版本支持elasticsearch java语言远程命令执行及文件上传 elasticsearchgroov语言远程命令执行及文件上传 struts2-005、struts2-009、struts2-013、struts2-016、struts2-019、struts2-020、struts2-devmode、 struts2-032、struts2-033、struts2-037、struts2-045、struts2-048、struts2-052 除struts2-053全部RCE漏洞验证并支持批量验证。 Struts2漏洞验证需要python环境并需要相关类库支持.点击python按钮初始化初始化python类库 如果初始化失败请按照如下步骤安装类库， 1、执行 $[python]/Scrips/easy_install pip 2、requests模块 安装方法 pip install requests 3、termcolor模块安装方法： pip install termcolor github: https://github.com/bigsizeme/java-rce-tools burpsuite源码地址：https://github.com/bigsizeme/burplugin-java-rce

burpunlimited

This project EXTENDS BurpLoader's license. It is NOT intended to replace BurpLoader.

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

chinese-names-corpus

中文人名语料库。中文姓名,姓氏,名字,称呼,日本人名,翻译人名,英文人名。

cknife

源码

cvc

Coupon and voucher center

cve-2018-15982

Flash sources for CVE-2018-15982 used by NK

cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-2019-0708

WORKING DoS PoC for CVE-2019-0708 RDP RCE vuln (for educational/research purposes only)

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

f-middlewarescan

A vulnerability detection scripts for middleware services

f-nascan

Scanning a network asset information script

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

feigong

Feigong，针对各种情况自由变化的mysql注入脚本,In view of the different things freely change the mysql injection script

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

github-monitor

Github信息泄漏监控系统

go-common

哔哩哔哩 bilibili 网站后台工程 源码

hackinglibrary

‪APT,‬ ‪Cyber warfare,‬ ‪Penetration testing,‬ ‪Zero-day,Exploiting,‬Fuzzing,Privilege-Escalation,browser-security‪,Spyware,Malwres evade anti-virus detection,‬ ‪Rookit CYPTER,‬ ‪Antiviruses Bypassing-av,‬ social engineering,WORMS,Sandbox-Escape,‬ ‪Memory-injection,‬ ‪Ethical,Gray,White,RedTeam,Bugbounty,bug hunter,Cheat Sheet‬...

ivideo

一个可以观看国内主流视频平台所有视频的客户端（Mac、Windows、Linux），包括 VIP 资源

jenkins_unauthenticated_remote_code_execution

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)