zstreamer Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

996.icu

Repo for counting stars and contributing. Press F to pay respect to glorious developers.

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

burpsuite

BurpSuite using the document and some extensions

caidao-official-version

**菜刀官方版本，拒绝黑吃黑，来路清晰

chankro

Herramienta para evadir disable_functions y open_basedir

cms-hunter

CMS漏洞测试用例集合

cnvd-c-2019-48814-or-cnnvd-201904-961

poc汇总 补充非默认上传路径

cobalt_strike_wiki

Cobalt Strike系列

cookiehacker

Chrome extension, very easy to use. Cookies from: JavaScript document.cookie/Wireshark Cookies etc.

cve-2015-6639

QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

cve-2016-0051

EoP (Win7) & BSoD (Win10) PoC for CVE-2016-0051 (MS-016)

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

cve-2018-8639-exp

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

dnspy

.NET assembly editor, decompiler, and debugger

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

go-common

哔哩哔哩 bilibili 网站后台工程 源码

hatchet

cknife（webshell manager）

hijacken

Use it for analysis and attack windows application using dll hijacking vulnerabilities

httpexhaustiver

HTTP协议穷举工具，可穷举用户名、密码、验证码等等。常用于用户名爆破、密码爆破、验证码爆破等类盗号漏洞测试。 编辑

httpfuzzerdemo

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

learn-python

小白的Python入门教程：部分章节源码

love71.github.io

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

poc-collect

各种开源CMS 各种版本的漏洞以及EXP 该项目将不断更新