angelwhu Goto Github PK

1book

《Web安全之机器学习入门》

2021_hvv

2021 hw

android_ndk

ndk develop demo

ant

实时上线的 XSS 盲打平台

antsword

AntSword is a cross-platform website management toolkit.

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

b374k

PHP Webshell with handy features

blind_watermark

Blind&Invisible Watermark ，图片盲水印，提取水印无须原图！

blog-comment

博客评论

boost-for-android

Android port of Boost C++ Libraries

cheatsheets

Penetration Testing/Security Cheatsheets

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

crawlergo

A powerful browser crawler for web vulnerability scanners

crawlergo_x_xray

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能

ctfs

store my ctf codes

cve-2017-8759

CVE-2017-8759

cve-2019-0708

Scanner PoC for CVE-2019-0708 RDP RCE vuln

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-14882_all

CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

deserialize

designpattern

《大话设计模式》 中的样例代码，改为java代码学习。

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

docker

My Docker files

docker_api_vul

docker 未授权访问漏洞利用脚本

dubbo-exp

Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。

exserial

Java Untrusted Deserialization Exploits Tools

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fofa

fofa website

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)