362902755 Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

anti-av

Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts

assetscan

资产探测工具，检测存活，检测风险端口，常规端口，全端口探测等等，对探测的端口的脆弱面进行安全分析进行

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 500+ posts and videos.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-opensource-security

A list of interesting stuffs that I have no time to test/review

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bailu-sed-tool

白鹿社工字典生成器，灵活与易用兼顾。

blueborne

PoC scripts demonstrating the BlueBorne vulnerabilities

cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

chainoffools

A PoC for CVE-2020-0601

chromeappheroes

🌈谷粒-Chrome插件英雄榜, 为优秀的Chrome插件写一本中文说明书, 让Chrome插件英雄们造福人类~ ChromePluginHeroes, Write a Chinese manual for the excellent Chrome plugin, let the Chrome plugin heroes benefit the human~ 公众号「0加1」同步更新

chromepass

Chromepass - Hacking Chrome Saved Passwords

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cnvd-2020-10487-tomcat-ajp-lfi-scanner

CNVD-2020-10487/CVE-2020-1938,批量扫描工具

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

ctf-tools

一款Python+Pyqt写的CTF编码、解码、加密、解密工具。

ctf_hacker-tools

CTF-渗透测试~工具合集

cve-2017-0785

Blueborne CVE-2017-0785 Android information leak vulnerability

cve-2018-7600-drupa7

CVE-2018-7600【Drupa7】批量扫描工具。

cve-2019-2725

CVE-2019-2725 命令回显

cve-2019-2890

cve-2020-0022

poc for cve-2020-0022

cve-2020-0023

BlueFrag experiments

cve-2020-0601

PoC for CVE-2020-0601

cve-2020-0602

Zeek package to detect CVE-2020-0601

cve-2020-0796

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

cve-2020-0796-scanner

This project is used for scanning cve-2020-0796 SMB vulnerability

cve-2020-1350

Bash Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2003 up to Windows Server 2019.