echo503 Goto Github PK

aceofhearts

红桃A(AceofHearts)是一款专为渗透测试人员设计的实用工具，旨在简化渗透测试环境的搭建过程并提供便捷的部署解决方案。

ajpy

appinfoscanner

一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具，可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如：Title、Domain、CDN、指纹信息、状态信息等。

beef

The Browser Exploitation Framework Project

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cve-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

cve-2021-26084

CVE-2021-26084 Remote Code Execution on Confluence Servers

cve-2021-36749

Apache Druid 任意文件读取

cve-2022-26133

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification and exploitation.

cve-2022-26134

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

cve-2023-44487

Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487

ghostcat-cnvd-2020-10487

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

gophish

Open-Source Phishing Toolkit

hoic

High Orbit Ion Canon DDOS Tool

hulk

HULK DoS tool ported to Go with some additional features.

loic

Low Orbit Ion Cannon - An open source network stress tool, written in C#. Based on Praetox's LOIC project. USE ON YOUR OWN RISK. WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES.

my-re0-k8s-security

:atom: [WIP] 整理过去的分享，从零开始的Kubernetes攻防 ...

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

pinduoduo_backdoor

拼多多apk内嵌提权代码，及动态下发dex分析

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

shepher

teler

Real-time HTTP Intrusion Detection

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more