siselong Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

about-attack

一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】

antsword-loader

AntSword 加载器

awvs-decode

The best and easiest way to decode and repack AWVS scripts. AWVS 最好、最简单、最新的解码/再打包方法，仅15行代码！

cmbchina

招商银行XXXX管理系统

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

cve-2015-7501

（CVE-2015-7501）JBoss JMXInvokerServlet 反序列化漏洞

dockerfile

常用的 docker 镜像库

gitskills

hack

🔰渗透测试资源库🔰黑客工具🔰维基解密文件🔰木马免杀🔰信息安全🔰技能树🔰数据库泄露🔰

i-s00n

javapayload

JavaPayload is a collection of pure Java payloads to be used for post-exploitation from pure Java exploits or from common misconfigurations (like not password protected Tomcat manager or debugger port).

javaweb-sec

攻击Java Web应用-[Java Web安全]

jndi

JNDI 注入利用工具

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

A malicious LDAP server for JNDI injection attacks

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

log4j2-cve-2021-44228

Remote Code Injection In Log4j

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

my-repo

mysql-jdbc-deserialization-payload

MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload

oddproxydemo

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

poc

rules

通用的指纹识别规则

security-scripts

A collection of public offensive and defensive security related scripts for InfoSec students.

serverless_toolkit

A collection of useful Serverless functions I use when pentesting

sgk

11月最新免费社工库，在线查询

testsssss

wechat6.5.3

wechat6.5.3