zhuxi1965 Goto Github PK
Name: Dajiangyou
Type: User
Name: Dajiangyou
Type: User
Msmap is a Memory WebShell Generator.内存马生成器。
事件驱动的渗透测试扫描器 Event-driven pentest scanner
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
Nishang - Offensive PowerShell for red team, penetration testing and offensive security.
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发,可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面,内网dns解析、内网socks5代理等等……,并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.
(ntlm钓鱼文件生成)A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)
Fast and customizable vulnerability scanner based on simple YAML based DSL.
漏洞批量验证框架
cs post exp plugin
帆软/致远密码解密工具
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
双语双端内网扫描以及验证工具(no opensource)
:telescope: Reverse engineering JavaScript and CSS sources from sourcemaps
Simple tool to recover .git folder from remote server
Re-play Security Events
Security-related Slide Presentation(大安全各领域各公司各会议分享的PPT)
A list for Web Security and Code Audit
【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。
Syscall Shellcode Loader (Work in Progress)
Shiro反序列化利用工具,支持新版本(AES-GCM)Shiro的key爆破,配合ysoserial,生成回显Payload
(快速DNS/网络/端口扫描)Dangerously fast DNS/network/port scanner
Apache Solr remote code execution via dataImportHandler
SQLI labs to test error based, Blind boolean based, Time based.
A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
超级SQL注入工具(SSQLInjection)是一款基于HTTP协议自组包的SQL注入工具,采用C#开发,直接操作TCP会话来进行HTTP交互,支持出现在HTTP协议任意位置的SQL注入,支持各种类型的SQL注入,支持HTTPS模式注入;支持以盲注、错误显示、Union注入等方式来获取数据;支持Access/MySQL/SQLServer/Oracle/PostgreSQL/DB2/SQLite/Informix等数据库;支持手动灵活的进行SQL注入绕过,可自定义进行字符替换等绕过注入防护。本工具为渗透测试人员、信息安全工程师等掌握SQL注入技能的人员设计,需要使用人员对SQL注入有一定了解。
数据库综合利用工具
Thinkphp rce扫描脚本,附带日志扫描
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.