fairyming Goto Github PK

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

memshelldemo

内存马Demo合集 memshell demo for java / php / python

micro8

Gitbook

nofile_webshell

无文件webshell

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

oa-tongda-rce

Office Anywhere网络智能办公系统

open-science

openbilibili-go-common

听说这是来自 https://github.com/openbilibili/go-common/ 的 “哔哩哔哩 bilibili 网站后台工程 源码”，不过咱也不知道这是啥。

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest_tools

收集一些小型实用的工具

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

poc-in-github

🚀PoC auto collect from GitHub.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

pwn_jenkins

Notes about attacking Jenkins servers

semitic

毕设设计 NDR初探

suricata

Suricata git repository maintained by the OISF

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

threathunting-book

Threat hunting Web Windows AD linux ATT&CK TTPs

video_smoke_detection

Spatio-Temporal Deep Neural Network Based Video Smoke Detection

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

weblogic_exploit

weblogic漏洞利用工具

weblogicscan

增强版WeblogicScan、检测结果更精确、插件化、添加CVE-2019-2618，CVE-2019-2729检测，Python3支持

webshell

This is a webshell open source project

webshell-detect-bypass

绕过专业工具检测的Webshell研究文章和免杀的Webshell

xiaomi_mi_wifi_r3g_vulnerability_poc

A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to version 2.28.23.