0xfd's Projects
WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and their respective commands, to be used against Windows/AD environments.
Dump all available paths and/ endpoints on WADL file.
Another way to bypass WAF Cheat Sheet (draft)
Use Waitfor.exe to maintain persistence
Open-source smart watch, based on LittlevGL Embedded GUI Library
Enumerate missing KBs and suggest exploits for useful Privilege Escalation vulnerabilities
WinDBG Anti-RootKit Extension
XSS payloads designed to turn alert(1) into P1
Clone of svn repository of http://insecurety.net/projects/web-malware/ project
Some of the best web shells that you might need
Web Backdoor Cookie Script-Kit
Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.
Multi-language web CGI interfaces exploits.
Python tool to Check running WebClient services on multiple targets based on @leechristensen
Bash simulator to control a server using PHP system functions.
⚓️ Easily test HTTP webhooks with this handy tool that displays requests instantly.
PowerShell script and Java code to decrypt WebLogic passwords
解密weblogic AES或DES加密方法
Weblogic一键漏洞检测工具，V1.5，更新时间：20200730
Webmin CVE-2022-0824 Post-Auth Reverse Shell
Check if your VPN leaks your IP address via the WebRTC technology
WebShell Dump
This is a webshell open source project
绕过专业工具检测的Webshell研究文章和免杀的Webshell
Various webshells. We accept pull requests for additions to this collection.
Give me a web shell, I'll give you a terminal. 🌯
Cracking encrypted wechat message history from android
微信Ipad协议golang版本，基于grpc的实现策略。这套代码需要通过gprc服务端组包解包才可以正常使用
Weaponized web shell
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent