whizsail Goto Github PK

hideshell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

hollow

EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and execute shellcode

hook_api

Assembly block for hooking windows API functions.

huan

Encrypted PE Loader Generator

idea-ja-netfilter

A javaagent framework

inceptor

Template-Driven AV/EDR Evasion Framework

infosec_reference

An Information Security Reference That Doesn't Suck

inlinewhispers2

Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2

inscan

边界打点后的自动化渗透工具

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

ipool

IPool 自动化IP池

jarm

java-application-exploits

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool WebLogic, WebSphere, JBoss, Jenkins, OpenNMS Vulnerability

java-rce-echo

Java RCE 回显测试代码

java-sec-code

Java web common vulnerabilities and security code which is base on springboot and spring security

jce

JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本

jndi

JNDI 注入利用工具

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

jsdecode

一些简单的js解密

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsloader

js免杀shellcode，绕过杀毒添加自启

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k8tools

K8工具(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

kill_webshell_detect

总结了免杀webshell的方法论

kingofbugbountytips

lazy-redteamer-scripts

lcx

自修改免杀lcx端口转发工具

learn-security-from-0

从0开始学安全，注重实战+技巧的运用，分享各种安全攻防干货，包括但不限于：内网渗透、代码审计 、Web安全、企业安全等。