look4your Goto Github PK

awesome-poc

一个各类漏洞POC知识库

blindsqli

A python based blind SQL injection exploitation script

clashx

cve

Gather and update all available and newest CVEs with their PoC.

deserialize

DeserializeExploit

dnspy

.NET debugger and assembly editor

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

httpcatcher

httpcatcher json code

javathings

Share Things Related to Java - Java安全漫谈笔记相关内容

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

microsoft-activation-scripts

A Windows and Office activator using HWID / Ohook / KMS38 / Online KMS activation methods, with a focus on open-source code and fewer antivirus detections.

nessus

nessus crack for docker

new_xp_captcha

xp_CAPTCHA(瞎跑 白嫖版) burp 验证码 识别 burp插件

oswe-tools

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

redteamnotes

红队笔记

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpweb

.NET 2.0 CLR project to retrieve saved browser credentials from Google Chrome, Mozilla Firefox and Microsoft Internet Explorer/Edge.

spark

✨Spark is a web-based, cross-platform and full-featured Remote Administration Tool (RAT) written in Go that allows you control all your devices anywhere. Spark是一个Go编写的，网页UI、跨平台以及多功能的远程控制和监控工具，你可以随时随地监控和控制所有设备。

ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

wechatextension-formac

Mac微信功能拓展/微信插件/微信小助手(A plugin for Mac WeChat)

xaq-vpn-pwn

某信vpn pwn溢出

xp_captcha

xp_CAPTCHA_api burp 验证码识别插件 调用接口 准确率更高