z-bool Goto Github PK
Name: 阿呆攻防
Type: User
Name: 阿呆攻防
Type: User
越权检测工具
Linux/Windows 安全加固脚本
A list for Web Security and Code Audit
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
query specific user and login IP from remote machine
内网:在域控或远程提取登录日志,快速获取域用户对应的IP地址
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.
批量对存在Shiro框架的目标爆破Key
shiro 反序列 命令执行辅助检测工具
shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
shiro反序列化利用综合利用,包含(回显执行命令/注入内存马)原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
信息收集自动化工具
A tool to automate the boring process of APK recon
Hiding your infrastructure from the boys in blue.
各种漏洞poc、Exp的收集或编写
SomePocsuitePoc
Next Generation HTTP Dir/File Fuzz Tool
A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities
CVE-2022-22965写入冰蝎webshell脚本
针对SpringBoot的开源渗透框架,以及Spring相关高危漏洞利用工具
项目是根据LandGrey/SpringBootVulExploit清单编写,目的hvv期间快速利用漏洞、降低漏洞利用门槛。
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
SpringCore0day from https://share.vx-underground.org/ & some additional links
记录实战中的各种sql注入绕过姿势
内网大型数据拖库解决方案,隧道不稳定时将内网数据库保存为csv格式文件
The second version of SQL Hunter. SQLi Hunter is a URL (Blind) SQL injection checker for multiple pages.
SSH记录密码
国光的手把手带你用 SSRF 打穿内网靶场源码
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.