zhuxi1965 Goto Github PK

followers: 2.0 following: 2.0 repos: 104.0 gists: 0.0

Name: Dajiangyou

Type: User

Dajiangyou's Projects

msmap

Msmap is a Memory WebShell Generator.内存马生成器。

nacs

事件驱动的渗透测试扫描器 Event-driven pentest scanner

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.

ntlm_theft

（ntlm钓鱼文件生成）A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

ofx

漏洞批量验证框架

ola

cs post exp plugin

passdecode-jar

帆软/致远密码解密工具

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

requesttemplate

双语双端内网扫描以及验证工具（no opensource）

reverse-sourcemap

:telescope: Reverse engineering JavaScript and CSS sources from sourcemaps

scrabble

Simple tool to recover .git folder from remote server

security-datasets

Re-play Security Events

security-ppt

Security-related Slide Presentation（大安全各领域各公司各会议分享的PPT）

securitylist

A list for Web Security and Code Audit

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

shhhloader

Syscall Shellcode Loader (Work in Progress)

shiro-exploit

Shiro反序列化利用工具，支持新版本(AES-GCM)Shiro的key爆破，配合ysoserial，生成回显Payload

skanuvaty

（快速DNS/网络/端口扫描）Dangerously fast DNS/network/port scanner

solr-rce-cve-2019-0192

Apache Solr remote code execution via dataImportHandler

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.

supersqlinjectionv1

超级SQL注入工具（SSQLInjection）是一款基于HTTP协议自组包的SQL注入工具,采用C#开发，直接操作TCP会话来进行HTTP交互，支持出现在HTTP协议任意位置的SQL注入，支持各种类型的SQL注入，支持HTTPS模式注入；支持以盲注、错误显示、Union注入等方式来获取数据；支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库；支持手动灵活的进行SQL注入绕过，可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计，需要使用人员对SQL注入有一定了解。

sylas

数据库综合利用工具

thinkphprce

Thinkphp rce扫描脚本，附带日志扫描

zhuxi1965 Goto Github PK

Dajiangyou's Projects

Recommend Projects

Recommend Topics

Recommend Org