30579096 Goto Github PK

jmet

Java Message Exploitation Tool

jndi-exploit-bypass-demo

Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndi-injection-exploit-1.0-snapshot-all

JNDI-Injection-Exploit-1.0-SNAPSHOT-all

jndiat

JNDI Attacking Tool

jndiexploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jndiexploit-1

A malicious LDAP server for JNDI injection attacks

jndiexploit-2

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jndiexploit-3

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

jndilog

use JNDILOG instead of DNSLOG

jndimonitor

一个LDAP请求监听器，摆脱dnslog平台

joomla-webshell-plugin

A webshell plugin and interactive shell for pentesting a Joomla website.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

jsondetect

A burp Extender to detect json, include fastjson,jackson,gson

jsonexp

fastjson漏洞批量检测工具

jsubfinder

jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).

juicypotato

Modifying JuicyPotato to support load shellcode and webshell

juicypotatong

Another Windows Local Privilege Escalation from Service Account to System

jumpserver-exp

JumpServer远程代码执行漏洞检测利用脚本

k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

keepass-dump-masterkey

Script to retrieve the master password of a keepass database <= 2.53.1

kekeo

A little toolbox to play with Microsoft Kerberos in C

kerberoast

Kerberoast attack -pure python-

kerberoast-1

kerberosrun

A little tool to play with Kerberos.

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kerbrute-1

An script to perform kerberos bruteforcing by using impacket

keylogger

键盘记录，支持定时回传

koiphish

A simple yet beautiful phishing proxy.

krbrelayup

KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings).