Git Product home page Git Product logo

blog: f0ng.github.io

微信公众号(Official Wechat): only security

欢迎交流探讨网络安全！

喜欢对漏洞自动化检测进行思考，并开发插件，以及研究感兴趣的方向

目前主要兴趣在挖掘SRC、漏洞检测、漏洞复现以及攻防实战

image

image

Lang

f0ng's Projects

autodecoder icon autodecoder

Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

autodecoder-usages icon autodecoder-usages

autoDecoder的用法及案例，包含加解密方法、绕waf、替换参数等操作。

captcha-killer-modified icon captcha-killer-modified

captcha-killer的修改版，支持关键词识别base64编码的图片，添加免费ocr库，用于验证码爆破，适配新版Burpsuite

get_av icon get_av

Windows杀软在线对比辅助

javafiledict icon javafiledict

Java应用的一些配置文件字典，来源于公开的字典与平时收集

jndiexploit-1 icon jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jyso icon jyso

It can be either a JNDIExploit or a ysoserial.

log4j2burpscanner icon log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

modifynavigator icon modifynavigator

谷歌浏览器插件，自动修改电脑端浏览器的Navigator变成移动端Navigator

poc2jar icon poc2jar

Java编写，Python作为辅助依赖的漏洞验证、利用工具，添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块、shiro rememberMe解密模块，加快测试效率

pocscan icon pocscan

继承大量poc检查 包含oa 如 泛微 通达 致远 万户 等。

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.