gncao Goto Github PK

jboss_autoexploit

JBoss JMXInvokerServlet JMXInvoker 0.3 - Remote Command Execution​ 漏洞批量检测

jdwp-shellifier

jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

jumpserver

Jumpserver是全球首款完全开源的堡垒机，是符合 4A 的专业运维审计系统。

kernel-exploits

learngit

learngit-1

推送请注意：只接受能被自动Merge的Pull Request

learngit1

linux

linux安全检查

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

marshalsec

metasploit-framework

Metasploit Framework

mimikatz

A little tool to play with Windows security

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

myjsrat

This is JSRat.ps1 in Python

ntrace

Command-line security tool to detect Cross-Site Tracing vulnerabilities, written in node.

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

padbuster

Automated script for performing Padding Oracle attacks

pasc2at

高级PHP应用程序漏洞审核技术 by 80vul

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

pentest_study

从零开始内网渗透学习

pentestdb

WEB渗透测试数据库

php-rootkit

Your interpreter isn’t safe anymore  —  The PHP module rootkit

poc-t

渗透测试插件化并发框架

pocsuite

Pocsuite is an open-sourced remote vulnerability testing framework developed by the Knownsec Security Team.

postfix-grok-patterns

Logstash configuration and grok patterns for parsing postfix logging

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

pub

police line - do not cross...

python-oneliner

Module for practical Python one-liners