thingtono Goto Github PK

asatools

Main repository to pull all NCC Group Cisco ASA-related tool projects.

awesome-cve-poc

✍️ A curated list of CVE PoCs.

blasting_dictionary

爆破字典

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

chinese-names-corpus

中文人名语料库。中文姓名,姓氏,名字,称呼,日本人名,翻译人名,英文人名。

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

customsignatures

datamining

learn in datamining

dnsbrute

a fast domain brute tool

domi-owned

IBM/Lotus Domino exploitation

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

erc20_token_spider

Spider ERC20 Token Source Code From Etherscan.io Verify Code / ERC20 智能合约 代币 源码 爬虫

esd

Enumeration sub domains(枚举子域名)

ethereumbook

Mastering Ethereum, by Andreas M. Antonopoulos, Gavin Wood

exchange_address_download

f-scrack

F-Scrack is a single file bruteforcer supports multi-protocol

faketime

Java agent to enable changing time in a Java project, mainly for testing.

fuzzdb-collect

网络上安全资源的搜集

gsil

GitHub Sensitive Information Leakage（GitHub敏感信息泄露）

guba_xueqiu_crawler

crawl posts from guba.eastmoney.com and xueqiu.com

h00k

h00k

httpscreenshot

ico

Ethereum ICO smart contracts and tools for managing token sales

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

jadx

Dex to Java decompiler

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jenkins

Jenkins漏洞探测、用户抓取爆破

jenkins-1

jenkins payload

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

justmd

markdown editor for windows/linux/osx