m1yt Goto Github PK

android-malware-samples

Android Malware Samples

apk_auto_enforce

APK一键自动化加固脚本

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-linux-rootkits

awvs-decode

The best and easiest way to decode and repack AWVS scripts. AWVS 最好、最简单、最新的解码/再打包方法，仅15行代码！

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

axisinvoker

Minimal AXIS2 webshell

backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of any kind and is intended for educational purposes only.

brootkit

Lightweight rootkit implemented by bash shell scripts v0.10

burpsuite_pro_v1.7.32

BurpSuite_Pro_v1.7.32

developer-roadmap

Roadmap to becoming a web developer in 2019

diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x

doubleagent

Zero-Day Code Injection and Persistence Technique

fastjson-rce-and-openrasp

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fastjson_rce_tool

fastjson命令执行自动化利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP

flexidie

Source code and binaries of FlexiSpy from the Flexidie dump

free-tech-ebooks-from-packtpub

A collection of free ebooks from Packt Publishing [Regularly Updated]

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

go-scp

Go programming language secure coding practices guide

goreporter

A Golang tool that does static analysis, unit testing, code review and generate code quality report.

gosec

Golang security checker

gryffin

Gryffin is a large scale web security scanning platform

hadoop-attack-library

A collection of pentest tools and resources targeting Hadoop environments

hideprocess

A basic Direct Kernel Object Manipulation rootkit that removes a process from the EPROCESS list, hiding it from the Task Manager

insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

java-web-security

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

javaopenrasp

A Java Rasp Demo

jdwp-shellifier