fhgzs Goto Github PK

cas_exp

CAS 硬编码 远程代码执行漏洞

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

cssinjection

Stealing CSRF tokens with CSS injection (without iFrames)

cvedb

CVE database

cybersecurityrss

CyberSecurityRSS: 优秀的网络安全知识来源 / A collection of cybersecurity rss to make you better!

daxiasec

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dingtalkchatbot

钉钉群自定义机器人消息Python封装

dns-rebinding-tool

dns rebind tool with custom scripts

dnsbrute

a fast domain brute tool

docker-ubuntu-vnc-desktop

Docker image to provide HTML5 VNC interface to access Ubuntu 16.04 LXDE desktop environment

dockertools

Some tools based on docker

document-style-guide

中文技术文档的写作规范

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

domain_hunter

A Burp Suite Extender that search sub domain and similar domain from sitemap

dont-starve-together-docker-cluster

根据配置文件快速建立饥荒联机版(DST)Docker集群

doop-mirror

Mirror of Doop: https://bitbucket.org/yanniss/doop

ecapture

无需CA证书，进行HTTPS的明文通讯抓包

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

elasticsearch-analysis-pinyin

This Pinyin Analysis plugin is used to do conversion between Chinese characters and Pinyin.

elkeid

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

ew

内网穿透(跨平台)

expload

Repo for Blog

eyes.sh

Optimized DNS/HTTP Log Tool for pentesters, faster and easy to use.

fapro

Fake Protocol Server

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java

fastjson_rce_tool

fastjson命令执行自动化利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP

ffuf

Fast web fuzzer written in Go