keloke Goto Github PK

brutexss

BruteXSS - Cross-Site Scripting Bruteforcer

bugrequest

Sniffer vulnerabilities in http request (chrome extension)

captcha

For python web , like Tornado, Django, Flask etc.

captcha-decoder

An elementary captcha decoder writen in python

cintruder

Captcha Intruder

commons-validator

Apache Commons Validator

ctfcracktools

一款旨在帮助CTFer在CTF中发挥作用的工具

dubbo-deserialization

[CVE-2020-1948] Apache Dubbo Provider default deserialization cause RCE

dvcs-pillage

Pillage web accessible GIT, HG and BZR repositories

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

hack-requests

The hack-requests is an HTTP network library for hackers

hackhttp

Hackhttp is an HTTP library, written in Python.

hackrequests

It is a dedicated requests lib that supports cookie, headers, get/post, etc. And it also supports rendering the response (e.g. Javascript, CSS, etc.) of GET requests by using PhantomJs enginee.

hello-world

for learning

htpwdscan

A python HTTP weak pass scanner

http-brute-force-attack

httprecon-nse

Advanced web server fingerprinting for Nmap

iamh

python learning

j2ee-scan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞扫描类的系统，比攻击者快一步发现风险漏洞。

learndocker

Docker，基本操作

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

learnsqlin

MySQL注入记录

lfiboomctf

本地文件包含漏洞&&PHP利用协议&&实践源码

metasploit-framework

Metasploit Framework

micro8

Gitbook

missfresh_all

nikto

Nikto web server scanner

poc-t

基于poc-t 并在此基础上增加批量功能！