zhutougg / book_notes

Related projects: ⓘ

• 7hang / POC-EXP
  Web端POC-EXP 整理
  ☆99Updated 3 years ago
• admintony / shiro_rememberMe_Rce
  利用长亭xray高级版的回显Gadget重写的一个shiro反序列化利用工具。
  ☆123Updated 4 years ago
• sv3nbeast / 2019_Vul_warning_Poc_Collect
  整理的2019年厂商发布的漏洞预警公开POC集合，不足之处还希望多多补充，完善
  ☆112Updated 4 years ago
• GGyao / CVE-2020-14882_ALL
  CVE-2020-14882_ALL综合利用工具，支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。
  ☆143Updated 2 years ago
• tangxiaofeng7 / Weblogic-scan
  ☆106Updated this week
• Ch1ngg / WebLogicPasswordDecryptorUi
  解密weblogic AES或DES加密方法
  ☆223Updated 3 years ago
• DSO-Lab / defvul
  DSO-Lab 漏洞研究成果整理
  ☆83Updated 2 years ago
• p1g3 / Fastjson-Scanner
  a burp extension to find where use fastjson
  ☆163Updated 4 years ago
• SkewwG / CmsExp
  cms的exp利用框架
  ☆33Updated 6 years ago
• Veraxy00 / Shiro-EXP
  Apache Shiro 反序列化漏洞检测与利用工具，一键注入内存马
  ☆138Updated 3 years ago
• imsebao / Code-Audit
  ☆69Updated 4 years ago
• LS95 / gopher-redis-auth
  This tool generates gopher link for exploiting SSRF and gaining RCE in redis with password.用于生成附带密码认证的gopher内容，用于SSRF等利用。
  ☆108Updated 5 years ago
• PINGXcpost / F-NAScan-PLUS
  F-NAScan-PLUS 安服资产搜集
  ☆140Updated 3 years ago
• r0eXpeR / Safety-checklist
  🌴一些安全备忘清单
  ☆59Updated last year
• black-mirror / Weblogic
  Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行
  ☆68Updated 5 years ago
• jas502n / CVE-2019-2888
  WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
  ☆58Updated 4 years ago
• Ch1ngg / JCE
  JCE - JSP/JPSX CodeEncode - 用于 Webshell 逃避静态查杀的辅助脚本
  ☆254Updated 2 years ago
• clm123321 / tongda_oa_rce
  ☆126Updated this week
• zhzyker / cobalt-strike
  Resources About Cobalt Strike. 100+ Tools And 200+ Posts.
  ☆30Updated 4 years ago
• LFYSec / ActuatorExploit
  SpringBoot Actuator未授权自动化利用，支持信息泄漏/RCE
  ☆233Updated 3 years ago
• TheKingOfDuck / paramFuzzer
  一款高效的参数fuzz工具|A faster param fuzzing test tool
  ☆100Updated 3 years ago
• timwhitez / Frog-Auth
  🐸Unauthorized Detection Framework未授权访问检测框架
  ☆157Updated 9 months ago
• m4yfly / butian-src-domains
  ☆82Updated this week
• feihong-cs / JspMaster-Deprecated
  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密
  ☆217Updated 3 years ago
• tangxiaofeng7 / TSLab-Exploit
  ☆77Updated this week
• smxiazi / fuzzDicts
  Web Pentesting Fuzz 字典,一个就够了。
  ☆70Updated 5 years ago
• BetaSecLab / betaseclab_tools
  ☆85Updated this week