foryouslg Goto Github PK

0day-security-software-vulnerability-analysis-technology

0day安全_软件漏洞分析技术

across

Across the Great Wall we can reach every corner in the world

android

:phone: The ownCloud Android App

antsword-loader

AntSword 加载器

attackwebframeworktools

本软件首先集成危害性较大前台rce(无需登录,或者登录绕过执行rce)。反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等

autoscan

beef

The Browser Exploitation Framework Project

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

cisco_pwdecrypt

Simple Python tool to decrypt the "enc_GroupPwd" variable in PCF files (and type 5/7 passwords).

cnseay

Seay源代码审计系统

createpassword

ctftools

Personal CTF Toolkit

cve

Gather and update all available and newest CVEs with their PoC.

cve-2017-11882

CVE-2017-11882 from https://github.com/embedi/CVE-2017-11882

cve-2017-11883

CVE-2017-11882 exploitation

cve_info_data

各大平台IOT设备漏洞资源库

cve_info_data-1

各大平台IOT设备漏洞资源库

delta-diaenergie-xss

Delta Electronics DIAEnergie 1.08.00 Exists XSS Vulnerability

dex2jar

Tools to work with android .dex and java .class files

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dirsearch

Web path scanner

displaynearbybluetooth

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dnspy

.NET debugger and assembly editor

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

dvwa

Damn Vulnerable Web Application (DVWA)

dvwa-php7

PHP7 + mariadb

email-ext-plugin

Jenkins email-ext plugin

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

file

The package is mainly include file related processing operations