wx-t Goto Github PK

12306

php脚本自动查票

agnoster-zsh-theme

A ZSH theme designed to disclose information contextually, with a powerline aesthetic

androspy

An Android RAT that written in C# by me

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

blasting_dictionary

爆破字典

burpsuite-extender-fastjson

在瓦都尅师傅的脚本改了一个bp自动检测fastjson rce的py插件，可检测1.2.24和1.2.47。若存在漏洞自动标注该流量，并在output中输出内容。 python脚本自行修改ceye和token值。 Reference：https://www.w2n1ck.com/article/44/

cry

Cross platform PoC ransomware written in Go

cve-2017-7529_poc

CVE-2017-7529_PoC

cve-2019-7238_nexus_rce_tool

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

dai-ma-shenji

ddos

DDOS tool in python.

ddos-1

ddos attact

dnsattack

DNSAttack Project. DNS攻击脚本。

du-app

毒 app sign 签名 js 解密的 python 复写版本

dung_beetle

Python从零开始，一点一滴学习爬虫。

fastjsonexploit

Fastjson vulnerability quickly exploits the framework（fastjson漏洞快速利用框架）

fuzz_dict

常用的一些fuzz及爆破字典，欢迎大神继续提供新的字典及分类。

git

wu

go-gin-example

An example of gin

gopacket

Provides packet processing capabilities for Go

hack-tools

hack tools

handbook

这里放置我的笔记、搜集、摘录、实践，给自己建设自我的知识体系，保持好奇心。嗨皮，嗨皮

highriskport

总结一些渗透中值得关注的默认端口

hosts

:statue_of_liberty:最新可用的google hosts文件。镜像：

https-github.com-rootphantomer-blasting_dictionary

hub

hub helps you win at git.

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

information-security

A place where I can create, collect and share tooling, resources and knowledge about information security.