lancerandass Goto Github PK

alternativeshellcodeexec

Alternative Shellcode Execution Via Callbacks

apkvulcheck

This is a tool to help androidcoder to check the flaws in their projects.

bbot

OSINT automation for hackers.

beacontelegram

Send message on Telegram when you get a new Cobalt Strike beacon

bypassbehinder4j

冰蝎Java WebShell自动化免杀生成

caesar

一个全新的敏感文件发现工具

cve-2021-3156

cve-exploits

PoCs for public CVE's I have been working on.

druidcrack

Druid 密文解密工具

ebpfkit

ebpfkit is a rootkit powered by eBPF

fart

ART环境下自动化脱壳方案

fastjson

Fastjson姿势技巧集合

fuckjsonp-rce-cve-2022-26809-sql-xss-fuckjsonp

警惕 一种针对红队的新型溯源手段!

hae

HaE - Highlighter and Extractor, 赋能白帽 高效作战

howtocook

程序员在家做饭方法指南。Programmer's guide about how to cook at home (Chinese).

javavulnsummary

Java漏洞分析汇合

jniwebshell

kernelhub

:palm_tree:Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (提权漏洞合集)

mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

np-manager

Apk、Dex、Jar的控制流混淆；Apk-Dex2C；Res资源混淆；Dex、jar、smali文件的相互转换； Dex、Pdf文件合并； Apk、dex、jar混淆和字符串加密； Apk签名、共存、去除签名校验、对话框取消、去除VPN/代理检测； Res资源混淆； Dex、AXML、ARSC文件编辑；字符串加密(Apk、dex)； 一键添加Xposed检测，一键添加弹窗、对话框； axml反编译/回编译、arsc文件查看字符常量； 一键LOG注入，一键去除所有弹窗(Toast)； 一键注入字符串解密LOG，Dex文件换包名； 多种Apk字符串加密方案(第一和最后三种Apk字符串加密防MT一键解密)； 一键添加禁止截屏，一键添加Apk崩溃日志记录； XML文本代码格式化； Dex文件查看字符常量； Apk超级混淆3.0--高效率直接对dex混淆，支持混淆四大组件，支持多dex； Apk功能--DEX混淆对抗。

poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134。

shadowbroker

The Shadow Brokers "Lost In Translation" leak

wordpress

WordPress, Git-ified. This repository is just a mirror of the WordPress subversion repository. Please do not send pull requests. Submit pull requests to https://github.com/WordPress/wordpress-develop and patches to https://core.trac.wordpress.org/ instead.