m-star-coder Goto Github PK

exploit-dictionary

fake_sqli_bypass

Fake框架的自动化Fuzz WAF/IDS 功能

frequently-used-dic

Frequently used Dictionaries

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

frpproplugin

frp0.33修改版,过流量检测,免杀,支持加载远程配置文件可用于cs直接使用的插件

fuzzscanner

一个主要用于信息搜集的工具集，主要是用于对网站子域名、开放端口、端口指纹、c段地址、敏感目录等信息进行批量搜集。

geekby.github.io

hexo blog

groovy-2.4.5-exploit

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露监控）

h4cks

Combination of all my Resources, Links & Scripts

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

hackjava

《Java安全-只有Java安全才能拯救宇宙》Only Java Security Can Save The Universe.

hawk-i

Automatic extract anomalious Web attack Payloads with Unsupervised Machine Learning algorithms

how-to-read-source-and-fuzzing

一些阅读源码和Fuzzing 的经验..

inscan

边界打点后的自动化渗透工具

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

iotsecurity101

From IoT Pentesting to IoT Security

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

javasecinterview

打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作

jctokenutil

Windows访问令牌查看及利用工具

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

khepri

🔥🔥🔥Free,Open-Source,Cross-platform agent and Post-exploiton tool written in Golang and C++, the architecture and usage like Cobalt Strike

kscan

Kscan是一款轻量级的资产发现工具，可针对IP/IP段或资产列表进行端口扫描以及TCP指纹识别和Banner抓取，在不发送更多的数据包的情况下尽可能的获取端口更多信息。

learn-c

不择手段学C，用汇编和体系结构相关知识理解C语言本质，用思维导图理解C语言语法。清清白白学C

linbing

本系统是对目标进行漏洞扫描的一个系统,前端采用vue技术,后端采用flask.核心原理是扫描主机的开放端口情况,然后根据端口情况逐个去进行poc检测,poc有110多个,包含绝大部分的中间件漏洞,本系统的poc皆来源于网络或在此基础上进行修改,在centons7环境下使用nginx和uwsgi部署,部署起来可能有点麻烦,烦请多点耐心

lspider

LSpider 一个为被动扫描器定制的前端爬虫

lxhtoolhttpdecrypt

HTTPDecrypt

malleable-c2-profiles

Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable C2 profiles that you may use. These profiles work with Cobalt Strike 3.x.

malleable-c2-randomizer

A script to randomize Cobalt Strike Malleable C2 profiles and reduce the chances of flagging signature-based detection controls