carol7s Goto Github PK

-proxy_pool

Proxy_Pool（代理资源池），一个小巧的代理ip抓取+评估+存储+展示的一体化的工具，包括了web展示和接口。

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

android-studio

Android Studio文件备份

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

badcode

恶意代码逃逸源代码 http://payloads.online

baibutieba-sign

百度贴吧自动签到/扫描登录二维码 自动签到

boom

短信轰炸

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

buy_pig_plan_python

buy_pig_plan 的 Python 版，电话攻击(电话轰炸、可代替短信轰炸)、留言攻击工具。

cve

cve-2015-3224

Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution implementation in Python

cve-2020-10977

GitLab 12.9.0 Arbitrary File Read

cve-2022-0847

CVE-2022-0847

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

emergency

应急响应脚本

exploitdb

The official Exploit Database repository

exploitdb-bin-sploits

Exploit Database binary exploits located in the /sploits directory

exploits

Some random exploits that may or may not be useful. Not responsible for misuse.

flash-pop

Flash钓鱼弹窗优化版

freeftpd-1.0.10---pass-remote-buffer-overflow

Standalone python exploit for all freeFTPd versions <1.0.10

ftpservicepython

Set up the FTP service locally using python, to get the login data.

fuzzing-dicts

Web Security Dictionary

gdbservrce

Turning an arbitrary GDBserver session into RCE

gitlab_rce

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

goby_poc

goby poc or exp,分享goby最新网络安全漏洞检测或利用代码

idea

IDEA文件备份

ident-user-enum

ident-user-enum is a simple PERL script to query the ident service (113/TCP) in order to determine the owner of the process listening on each TCP port of a target system.

image_downloader_multiprocessing_python

Downloading Images with multiprocessing using python requests and multiprocessing.

impacket

Impacket is a collection of Python classes for working with network protocols.

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon9.1.4内置150个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0