whoamiecho Goto Github PK

cve-2020-9484

利用ceye批量检测CVE-2020-9484

cve-2023-25194

dayu

一款开源指纹识别工具。

digital-privacy

一个关于数字隐私搜集、保护、清理集一体的方案,外加开源信息收集(OSINT)对抗

docker_practice

Learn and understand Docker technologies, with real DevOps practice!

domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

drunkenkatz

a 'modified' version of the Invoke-Mimikatz.ps1 powershell script

erebus

CobaltStrike后渗透测试插件

exploit-cve-2016-10033

PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container

fastjson

Fastjson姿势技巧集合

fuxi-scanner

Network Security Vulnerability Scanner

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

golang-open-source-projects

为互联网IT人打造的中文版awesome-go

iis-raid

A native backdoor module for Microsoft IIS (Internet Information Services)

javaid

java source code danger function identify prog

k8s-security

Kubernetes security notes and best practices

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

laravel-notes

Gitbook

learnjavabug

Java安全相关的漏洞和技术demo，其中包括原生Java、Fastjson、Jackson、Hessian2以及XML反序列化漏洞利用和Dubbo（Hessian2反序列化）、Shiro（PaddingOracleCBC）等框架的exploits，并且还有Java Security Manager绕过、Dubbo-Hessian2安全加固、RMI利用等等实践代码。

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

linuxtools_rst

Linux工具快速教程

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

mimipenguin

A tool to dump the login password from the current linux user

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS) automated pen-testing framework capable of performing static and dynamic analysis.

mst-sec-lecture-notes

:book: 米斯特白帽培训讲义

my-re0-k8s-security

:atom: [WIP] 整理整理过去的分享，从零开始的Kubernetes攻防 ...

nps_payload

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn (@Spoonman1091) Payload written by Ben Mauch (@Ben0xA) aka dirty_ben

osxchromedecrypt

Decrypt Google Chrome and Chromium Passwords on Mac OS X. No dependencies, quick, fast.

paper

security technology documents