jerrynotme Goto Github PK

struts2vulstools

Struts2系列漏洞检查工具

sunlogin_rce

向日葵 RCE

th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

thinkphp-rce-poc-collection

thinkphp v5.x 远程代码执行漏洞-POC集合

threat-broadcast

威胁情报播报

tomcat-weak-password-scanner

醉考拉tomcat后台弱口令扫描器，命令行版+图形界面版。

tomcatbrute

TomcatBrute tool

unicorn

Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.

ventoy

A new bootable USB solution.

vue.draggable

Vue drag-and-drop component based on Sortable.js

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

vulnerability-disclosures

Vulnerability analysis and proof of concepts

vulnerability-wiki

一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库

vulscan

漏洞扫描：st2、tomcat、未授权访问等等

vulstudy

使用docker快速搭建各大漏洞靶场，目前可以一键搭建17个靶场。

vxscan

python3写的综合扫描工具，主要用来敏感文件探测(目录扫描与js泄露接口)，WAF/CDN识别，端口扫描，指纹/服务识别，操作系统识别，弱口令探测，POC扫描，SQL注入，绕过CDN，查询旁站等功能，主要用来甲方自测或乙方授权测试，请勿用来搞破坏。

weaver_exp

泛微OA漏洞综合利用脚本

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

webgoat

WebGoat 8.0

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

weblogic-cve-2023-21839

weblogic-scan

weblogic 漏洞扫描工具

weblogic_rce

cve2019_2725、CNVD-C-2019-48814 Weblogic _async remote command execution exp

weblogic_unserialize_exploit

java unserialize vul for weblogic exploit

weblogicscan

Weblogic vulnerability one-click poc detection.

weblogicscan-1

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

wifi-password-stealer

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

wordlists

📜 A collection of wordlists for many different usages.

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB

xsec-ip-database

xsec-ip-database为一个恶意IP和域名库（Malicious ip database）