pe4ch Goto Github PK

-cve-2017-9805

Exploit script for Apache Struts2 REST Plugin XStream RCE (‎CVE-2017-9805)

active-directory-pentest

Windows域渗透学习笔记

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

anyproxy

A fully configurable http/https proxy in NodeJS

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

autosqlmap

autoSqlmap for sqlmapapi by proxy

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

behinder

“冰蝎”动态二进制加密网站管理客户端

blasting_dictionary

爆破字典

brpc

brpc is an Industrial-grade RPC framework using C++ Language, which is often used in high performance system such as Search, Storage, Machine learning, Advertisement, Recommendation etc. "brpc" means "better RPC".

bugscan_exploits

burp-pyjfuzz

Burp Suite plugin which implement PyJFuzz for fuzzing web application.

c1

cf

Cloud Exploitation Framework 云环境利用框架，方便安全人员在获得 AK 的后续工作

chromedp

A faster, simpler way to drive browsers supporting the Chrome DevTools Protocol.

cobaltstrike

CobaltStrike's source code

cobra

Source Code Security Audit (源代码安全审计)

collection-document

Collection of quality safety articles. Awesome articles.

common-password

字典生成脚本, 用python语言写成的可交互性的字典生成脚本。尤其适合社会工程学，当你收集到目标的具体信息后，你就可以通过这个脚本来智能化生成关于目标的字典。

crossc2

generate CobaltStrike's cross-platform payload

cve-2017-1000353

jenkins CVE-2017-1000353 POC

cve-2017-10271

WebLogic Exploit

cve-2017-7529

cve-2019-7238

Nexus Repository Manager 3 Remote Code Execution without authentication < 3.15.0

cve-hub

rt

epay

2020.02彩虹易支付原版开源

ew

内网穿透(跨平台)

example-hello-world

example-intruder-payloads