horace2027 Goto Github PK

-17.0cnvd-2022-60632

本项目包含poc和exp，未经授权禁止攻击他人电脑。如个人违反安全相关法律，后果与本人无关

111

11

40g

51jobspider_project

51JobSpider_View

attackwebframeworktools

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

awesome-large-multimodal-agents

awesome-open-ai-sora

Sora AI Awesome List – Your go-to resource hub for all things Sora AI, OpenAI's groundbreaking model for crafting realistic scenes from text. Explore a curated collection of articles, videos, podcasts, and news about Sora's capabilities, advancements, and more.

bypassav-web

nim一键免杀

c2concealer

C2concealer is a command line tool that generates randomized C2 malleable profiles for use in Cobalt Strike.

cobaltstrike-config-extractor

Cobalt Strike Beacon configuration extractor and parser.

cve-2021-36798

Cobalt Strike < 4.4 dos CVE-2021-36798

cve-2021-36934

CVE-2021-36934 HiveNightmare vulnerability checker and workaround

cve-2021-38647

Proof on Concept Exploit for CVE-2021-38647 (OMIGOD)

cve-2021-38648

A PoC exploit for CVE-2021-38647 RCE in OMI

cve-master

收集本人自接触渗透测试用于漏洞验证的所有热门CVE、POC、CNVD攻击有效载荷+测试工具+FUZZ,一个仓库满足许多攻击测试场景,开箱即用.

docker-confluence-patched

Patched Confluence 7.12.2 (CVE-2021-26084)

dough

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

f8x

红/蓝队环境自动化部署工具 Red/Blue team environment automation deployment tool

findobjects-bof

A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or process handles.

fuzz-dict

一些常见字典

github-action

抓取微信公众号、微博、知乎、豆瓣、石墨文档、哔哩哔哩、AcFun的文章到issue保存的github actions

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

indie-hacker-tools

收录独立开发者出海技术栈和工具

keepchatgpt

这是一款提高ChatGPT的数据安全能力和效率的插件。并且免费共享大量创新功能，如：自动刷新、保持活跃、数据安全、取消审计、克隆对话、言无不尽、净化页面、展示大屏、展示全屏、拦截跟踪、日新月异等。让我们的AI体验无比安全、顺畅、丝滑、高效、简洁。

liveautorecord

基于 Electron 的多平台直播自动录制软件

lynx-exploit-db

All the Lynx Exploits created - discontinued

mediacrawler

小红书笔记 | 评论爬虫、抖音视频 | 评论爬虫、快手视频 | 评论爬虫、B 站视频 ｜ 评论爬虫、微博帖子 ｜ 评论爬虫

mobillama

MobiLlama : Small Language Model tailored for edge devices

moneyprinterturbo

利用大模型，一键生成短视频