nothingcw Goto Github PK

software-security-learning

Software-Security-Learning

sourcedetector-dist

编译好的SourceDetector，这小b登编译一次真折磨人！！！

spade

APK backdoor embedder

spring-security-book-samples

《深入浅出Spring Security》一书配套源码。

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

srdi

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

ssh-inject

A ptrace POC by hooking SSH to reveal provided passwords

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

staykit

Cobalt Strike kit for Persistence

struts2-scan

Struts2全漏洞扫描利用工具

sub.sh

Multiprocessing(Parallel)Subdomain Detect Script

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

subjs

Fetches javascript file from a list of URLS or subdomains.

superwordlist

基于实战沉淀下的各种弱口令字典

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

taowu-cobalt-strike

telemetry

WINDOWS TELEMETRY权限维持

telemetry-1

ABUSING WINDOWS TELEMETRY FOR PERSISTENCE

tengri_shellcode_loader

Encrypted Shellcode Loader Generator

theharvester

E-mails, subdomains and names Harvester - OSINT

tvnjviewer

Build myself for cs project

txportmap

Port Scanner & Banner Identify From TianXiang

ubuntu-v2ray

undefender

Killing your preferred antimalware by abusing native symbolic links and NT paths.

vant-weapp

轻量、可靠的小程序 UI 组件库

vcenter_saml_login

A tool to extract the IdP cert from vCenter backups and log in as Administrator

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

ventoy

A new bootable USB solution.

verification_code

验证码研究破解心得记录。包含网易易盾，阿里云验证码，极验验证码等主流验证码破解。包含点按验证码、点选验证、语序点选等等。已更新极验验证码、企业公示网采集心得。

vhost_password_decrypt

vhost password decrypt