sesyi Goto Github PK

over-golang

Golang相关：[审稿进度80%]Go语法、Go并发**、Go与web开发、Go微服务设施等

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

pass-to-hash-ews

passh

A simple Python SSH server that reveals passwords of connecting clients

passwordpermutator

A tool to generate password from words that user provide.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pcapknock

Watches for trigger packets, runs commands or spawns a shell

pcicrash

PCIDriverKit proof-of-concept for CVE-2022-26763

pcmc

pe

A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

pe-union

Binder, downloader & crypter

pe_to_shellcode

Converts PE into a shellcode

peframe

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

penetration-suite-toolkit

本项目制作的初衷是帮助渗透新手快速搭建工作环境，工欲善其事，必先利其器。

pentest-cheat-sheet

Cheat-Sheet of tools for penetration testing

pentest_interview

个人准备渗透测试和安全面试的经验之谈，和去部分厂商的面试题，干货真的满满~

pentest_note

渗透测试常规操作记录

pentestdb

各种数据库的利用姿势

persistence

Resources About Persistence, Multiple Platforms. Including ~80 Tools and 300+ Posts.

petitpotam

phantomsocks

A proxy server for Linux/Windows/macOS with Pcap/RawSocket/WinDivert to modify packets

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

pingtunnel

ping tunnel is a tool that advertises tcp/udp/socks5 traffic as icmp traffic for forwarding.

poc-in-github

📡PoC auto collect from GitHub.

pocassist

全新的开源漏洞测试框架，实现poc在线编辑、运行、批量测试。使用文档：

pocassistdb

database of pocassist（漏洞库）

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

poolfengshui

笔者的在原作者池风水利用工具(以下简称工具)基础上进行二次开发,新增了全自动获取内核调试模块符号的偏移量及配置参数和不同漏洞利用方式优化等功能, 解决了不同Windows版本适配问题,工具包括适配驱动和利用程序两部分组成,实现了在Windows 10 19H1之后任意版本包括满补丁系统上的稳定利用.

portbender

TCP Port Redirection Utility

portbrute

一款跨平台小巧的端口爆破工具，支持爆破FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD / A cross-platform compact port blasting tool that supports blasting FTP/SSH/SMB/MSSQL/MYSQL/POSTGRESQL/MONGOD