20200629 Goto Github PK

ast4sec

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

cve-2022-26134

Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).

dm-ticket

大麦网自动购票, 支持docker一键部署。Damai automatically purchases tickets, running in docker container.

finereportdecode

Decode the rootManagerPassword in privilege.xml

gadgetinspector

A byte code analyzer for finding deserialization gadget chains in Java applications

geacon_plus

CobaltStrike beacon written in golang

j2oswin

from 倾旋

java-object-searcher

java内存对象搜索辅助工具

librarysys

基于Django2.0的图书管理系统

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

nc65filereceiveservlet

NC65反序列化上传

openfire_shells

后台插件getshell

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

rathole

A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.

rememshell

Java Agent内存马

rustdesk

An open-source remote desktop, and alternative to TeamViewer.

suo5

一款高性能 HTTP 代理隧道工具 | A high-performance http proxy tunneling tool

tencentscfwebshell

godzilla-base64 on scf

vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

vshell

vshell 是一款go编写的主机管理工具 vshell is a Remote Administation tool written in Go (RAT)

vulnerability-wiki

一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库

webchat

基于Websocket的即时通讯聊天室

webshellsample

webshell sample for WebShell Log Analysis

ysomap

A helpful Java Deserialization exploit framework based on ysoserial

ysoserial

custom

yuedu

📚「阅读」APP 精品书源（网络小说）