gingercatxdd Goto Github PK

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

chunked-coding-converter

Burp suite 分块传输辅助插件

cnvd-2020-10487-tomcat-ajp-poc

CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc

cve-2018-2628

Weblogic 反序列化漏洞(CVE-2018-2628)

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2020-1938

cve-2021-4034

CVE-2021-4034 1day

dcompotato

Some Service DCOM Object and SeImpersonatePrivilege abuse.

de4dot

.NET deobfuscator and unpacker.

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

dirmap

An advanced web directory & file scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian.一个高级web目录、文件扫描工具，功能将会强于DirBuster、Dirsearch、cansina、御剑。

dirsearch

Web path scanner

dirsearch_1

dirtycow-exp

编译好的脏牛漏洞（CVE-2016-5195）EXP

dnspy

.NET debugger and assembly editor

fastjson

Fastjson姿势技巧集合

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gingerrrcat.github.io

githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

honeypotdic

蜜罐抓到的Top密码，根据使用频率排序，持续更新中...

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

java

关于学习java安全的一些知识,正在学习中ing,欢迎fork and star

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

linux-exploit-suggester-2

Next-Generation Linux Kernel Exploit Suggester

linuxprivchecker

Python3 compatible linuxprivchecker

linuxprivchecker-1

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

metasploit-autopwn

db_autopwn plugin of metasploit

myexploit

OAExploit一款基于产品的一键扫描工具。