hihihimimimi Goto Github PK

ant

实时上线的 XSS 盲打平台

antsword

AntSword is a cross-platform website management toolkit.

antsword-loader

AntSword 加载器

awesomeencoder

AntSword 自定义编(解)码器分享

awesomescript

AntSword Shell 脚本分享/示例

behinder

“冰蝎”动态二进制加密网站管理客户端

bypassantivirus

远控免杀系列文章及配套工具，搜集汇总了互联网上的几十种免杀工具和免杀方法，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cafecompare

Java code comparison tool (jar / class)

chaos

:fire: CHAOS is a PoC that allow generate payloads and control remote operating systems.

cve-2019-7238

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0

cve-2020-10199_cve-2020-10204

CVE-2020-10199、CVE-2020-10204漏洞一键检测工具，图形化界面。CVE-2020-10199 and CVE-2020-10204 Vul Tool with GUI.

exploit

My exploitDB.

fake-flash.cn

www.flash.cn 的钓鱼页，中文+英文

fastjson

A fast JSON parser/generator for Java.

fastjson-blacklist

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

github-email

Get a GitHub user's email. All sneaky-like. :sunglasses:

harvest

Bread for the people!

iplist

:book: IP CIDRs List / IP 地址列表，每月更新

jip-common

Basic powerfull IPv4&IPv4 operation toolkit with fast search speed & little memory usage.

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

liferay-ce-portal-java-deserialization

This repo contains PoC for the remote code execution vulnerability of Liferay CE Portal!

marshalsec

metasploit-framework

Metasploit Framework

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

oneforall

OneForAll是一款功能强大的子域收集工具

paper

Web Security Technology & Vulnerability Analysis Whitepapers

penetration_testing_case

用于记录分享一些有趣的案例

pochubs

PocHubs是为了整合网上知名开源框架的漏洞详细和POC