5up3rc Goto Github PK

java_rasp_example

jdsrc-small-classroom

京东SRC小课堂系列文章

jdwp-shellifier

jenkins_unauthenticated_remote_code_execution

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jiacrontab

提供可视化界面的任务调度工具

jiebago

Jieba 分词 Go 语言版

jira-scan

CVE-2017-9506 - SSRF

joes-sandbox

jon

jon 是一款LINUX系统攻防工具箱，包含扫描，入侵，痕迹清理，木马，网站测试等各种黑客工具。

joomscan

OWASP Joomla Vulnerability Scanner Project

js-scp

JavaScript Secure Coding Practices guide

jscpp

A simple C++ interpreter written in JavaScript

jsencrypter

一个用于加密传输爆破的Burp Suite插件

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsonp-hunter

JSONP Hunter in burpsuite.

jsonp_info_leak

jsonp隐私泄漏发现

jsparser

jsprime

a javascript static security analysis tool

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

jsspider

A js infomation dig tool.

judas

justtrustme

JustTrustMe的二次开发版本，用于禁用SSL证书校验，扩展了原来程序的功能。

jvm.go

A toy JVM written in Go

jvmgo-book

《自己动手写Java虚拟机》源代码

jwt_hacking

Collection of scripts that aid in penetration testing of JSON Web Tokens

jxwaf

JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的下一代web应用防火墙

k8cscan

Cscan 5.0 & Cobalt Strike 大型内网渗透自定义插件化扫描器（附C#/VC/Delphi/Python插件Demo源码) 程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆破、Oracle密码爆破、MSSQL密码爆破、Windows/Linux系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kadimus

LFI Scan & Exploit Tool