chutian-cn Goto Github PK

1195777-chrome0day

404starlink

404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

alicloud-tools

阿里云ECS、策略组辅助小工具

android_vuln_poc-exp

This project contains pocs and exploits for vulneribilities I found (mostly)

archery

SQL 审核查询平台

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-hacking-lists

平常看到好的渗透hacking工具和多领域效率工具的集合

awesomeencoder

AntSword 自定义编(解)码器分享

burpsuite-plugins-usage

chutianbk.github.io

BLOG

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobalt_homework

分析cobaltstrike c2 协议

cobaltstrike

CobaltStrike's source code

cve-2017-8890

None

cve-2019-0230

CVE-2019-0230 Exploit

cve-2021-26084_confluence

Confluence Server Webwork OGNL injection

dbj

大宝剑-边界资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

dict-hub

红队字典：服务默认/弱口令、设备默认/弱口令

dirtycow

dorabox

DoraBox - 基础Web漏洞训练靶场

dumpall

一款信息泄漏利用工具，适用于.git/.svn源代码泄漏和.DS_Store泄漏

easyxsspayload

XssPayload List . Usage:

es5-shim

ECMAScript 5 compatibility shims for legacy (and modern) JavaScript engines

eva2

Another version of EVA using anti-debugging techs && using Syscalls

exploits

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gllloader

gofun

一些内网渗透中可能用到的东拼西凑做出来的小工具

hfish

Extend the enterprise security test open source honeypot system , Record hacker attacks. 扩展企业安全测试主动诱导型开源蜜罐框架系统，记录黑客攻击手段

impulsivedllhijack

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.