ecawen Goto Github PK
Type: User
Blog: jiwo.org
Type: User
Blog: jiwo.org
**蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.
一个各类漏洞POC知识库
备份一些可能删库跑路的好项目
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
generate CobaltStrike's cross-platform payload
原文已被作者删除,备份用,非原创,EXP & POC
一款用Go语言编写的数据库自动化提权工具,支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接
An free, elegant, simple, fast android RTSP/RTMP/HLS/HTTP Player.EasyPlayer support RTSP(RTP over TCP/UDP),RTMP,HTTP,HLS,cover all kinds of streaming media! EasyPlayerPro是一款免费、精炼、易用、高效、稳定的流媒体播放器,支持RTSP(RTP over TCP/UDP)、RTMP、HTTP、HLS等多种流媒体协议,支持各种各样编码格式的流媒体音视频直播流、点播流、文件播放!
Penetration test
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。
基于vite+vue3+gin搭建的开发基础平台,集成jwt鉴权,权限管理,动态路由,分页封装,多点登录拦截,资源权限,上传下载,代码生成器,表单生成器等开发必备功能,五分钟一套CURD前后端代码。
一款适用于红蓝对抗中的仿真钓鱼系统
哥斯拉
为了方便安全从业人员在使用网络测绘平台进行信息搜集时的效率,本程序集合了多个网络测绘平台,可以快速在多个网络测绘平台搜索信息并且合并展示及导出。
Jie stands out as a comprehensive security assessment and exploitation tool meticulously crafted for web applications. Its robust suite of features encompasses vulnerability scanning, information gathering, and exploitation, elevating it to an indispensable toolkit for both security professionals and penetration testers.(expectations)
from https://github.com/feihong-cs/JNDIExploit
对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改
The Military Planner Application is an Application Prototype Template for planning military operations.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
面向网络安全从业者的知识文库🍃
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
POC&EXP仓库、hvv弹药库、Nday、1day
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
Struts2全版本漏洞检测工具18.09
Accurately Locate Smartphones using Social Engineering
Extracts cookies from Chrome.
shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack
各种漏洞poc、Exp的收集或编写
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.