youngweber Goto Github PK

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

apt_report

Interesting apt report collection and some special ioc express

attackwebframeworktools-5.0

本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

awesome-redteam

一个红队知识仓库

burp-api-drops

burp插件开发指南

collection-document

Collection of quality safety articles

cve-2019-2888

WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)

cve-2020-17144

weaponized tool for CVE-2020-17144

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

cve_2021_1732

edr-bypass-demo

Some demos to bypass EDRs or AVs by 78itsT3@m

ev

EV: IDS Evasion via Packet Manipulation

fscan-poc

强化fscan的漏扫POC库

idea-project-fish-exploit

JetBrains系列产品.idea钓鱼反制红队

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

linux-exploit-suggester

Linux privilege escalation auditing tool

linuxtq

《Linux提权工具与方法论》

memshelldemo

内存马Demo合集 memshell demo for java / php / python

moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

openwrt-ci

OpenWrt CI 在线集成自动编译环境

peass-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

pentest_study

从零开始内网渗透学习

python-100-days

Python - 100天从新手到大师

redteamer

红方人员作战执行手册

security_service_interviews

安服面经☞渗透测试/代码审计/安全研究

swagger-hack

自动化爬取并自动测试所有swagger接口

tomcatmemshell

拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马