kyhvedn Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

2022-hw-poc

2022 护网行动 POC 整理

91porn

91Porn Android 客户端，突破游客每天观看10次视频的限制，还可以下载视频

angelsword

Python3编写的CMS漏洞检测框架

antsword

AntSword is a cross-platform website management toolkit.

apache_shiro_1.2.4_rce

Apache shiro <= 1.2.4 rememberMe 反序列化漏洞利用工具

apt_report

Interesting apt report collection and some special ioc express

artifactkit

attackdetection

Attack Detection

audit-learning

记录自己对《代码审计》的理解和总结，对危险函数的深入分析以及在p牛的博客和代码审计圈的收获

autofindxssandcsrf

自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-incident-response

A curated list of tools for incident response

bashscanner

A fast way to scan your server for outdated software and potential exploits.

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

bilibili-backup

blasting_dictionary

爆破字典

bluekeep_cve-2019-0708_poc_to_exploit

Porting BlueKeep PoC from @Ekultek to actual exploits

bruteforce_py

all bruteforces with python, ssh bf, wordpress bf, cpanel bf, mysql bf, etc

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

burp-extensions

Central Repo for Burp extensions

burpsuite

BurpSuite using the document and some extensions

burpsuite-plugin

Plugin For BurpSuite (Pentester)

burpsuite_pro_v1.7.32

BurpSuite_Pro_v1.7.32

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet