heyseafh Goto Github PK

icmpsh

Simple reverse ICMP shell

impulse

:bomb: Impulse Denial-of-service ToolKit

iot-vulhub

IoT固件漏洞复现环境

iot_sec_tutorial

IoT安全教程

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiscan

无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

kill-process

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

langsrccurise

SRC子域名资产监控

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

livescan

AntSword 存活弹出插件，支持 PHP, ASP, ASPX

log4j2scan

用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件

log4j2_burp_scan

log4j2 被动 burp rce扫描工具 get post cookie,header，json全类型 全参数识别

log4j_poc

lvmengreport

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

motrix

A full-featured download manager.

new_xp_captcha

xp_CAPTCHA(瞎跑 白嫖版) burp 验证码 识别 burp插件

paddlegan

PaddlePaddle GAN library, including lots of interesting applications like First-Order motion transfer, wav2lip, picture repair, image editing, photo2cartoon, image style transfer, and so on.

passive-scan-client

Burp被动扫描流量转发插件

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

php-audit-labs

一个关于PHP的代码审计项目

php-fpm

用WebShell攻击PHP-FPM Attacking PHP-FPM with WebShell

phpinfo

AntSword 插件示例