jimsonzhang Goto Github PK

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jinher-oa-readfile

金和OA任意文件读取 / Code By:Jun_sheng

jndiexploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jspkiller

基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell

jundeadshell

Java内存马注入工具

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集)

ksubdomain

无状态子域名爆破工具

kunyu

Kunyu, more efficient corporate asset collection

landrayreadanyfile

蓝凌OA系统任意文件读取漏洞批量验证POC和EXP

lazagne

Credentials recovery project

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linux

《Linux学习资源大全》

linuxtq

《Linux提权工具与方法论》

log4j-affected-db

A community sourced list of log4j-affected software

log4j-detector

This script will help you to automate exploit scanning againts a list of URL's

log4j-scanner

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

log4j2-vaccine

log4j2-vaccine

log4j2_rce

log4j2 rce、poc

log4j2burpscanner

CVE-2021-44228 log4j2 RCE Burp Suite Passive Scanner，can customize the ceye.io api or other apis，including internal networks

log4j2scan

Log4j2 RCE Passive Scanner for BurpSuite

log4j_rce_tool

Log4j 多线程批量检测利用工具

log4jshell-lab

logah

Python写的Linux Apache实时日志分析及服务器防护工具

logontracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

loki

Loki - Simple IOC and Incident Response Scanner

luwu

红队基础设施自动化部署工具

maccheck

一个Mac下信息搜集小脚本 主要用于信息搜集/应急响应/检测挖矿进程/异常进程/异常启动项