c0d1007 Goto Github PK

javaid

java source code static code analysis and danger function identify prog

javaprobe

一款Java应用运行时信息收集工具

javasec

自己学习java安全的一些总结，主要是安全审计相关

javaunserializeexploits

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jre8u20_rce_gadget

JRE8u20_RCE_Gadget

jsencrypter

一个用于加密传输爆破的Burp Suite插件

jsfuck

Write any JavaScript with 6 Characters: []()!+

jsonp-hunter

JSONP Hunter in burpsuite.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kekeo

A little toolbox to play with Microsoft Kerberos in C

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

kubesploit

kubiscan

A tool to scan Kubernetes cluster for risky permissions

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon6.6内置74个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

language

Some dirty trick to learn different programming language.

langzi_src_safe_cruise

LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。

lazagne

Credentials recovery project

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

libveinmind

linglong

一款甲方资产巡航扫描系统。系统定位是发现资产，进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示

linuxcheck

linux信息收集/应急响应/常见后门/挖矿检测/webshell检测脚本

log4j2-vaccine

log4j2-vaccine

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

lxhtoolhttpdecrypt

HTTPDecrypt

marble

A high performance in-memory hive sql engine based on Apache Calcite

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等