ki11y0u Goto Github PK

996.icu

Repo for counting stars and contributing. Press F to pay respect to glorious developers.

abptts

TCP tunneling over HTTP/HTTPS for web application servers

arsenal

Cobalt Strike 3.13 Arsenal Kit

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

b374k

PHP Webshell with handy features

behinder

Behinder source code

burpsuite-collections

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦

burpsuite-plug-in

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

cloud-native-security-book

《云原生安全：攻防实践与体系构建》资料仓库

cobaltstrike

CobaltStrike's source code

crossc2

generate CobaltStrike's cross-platform payload

dirtycow.github.io

Dirty COW

easy-for-webscan

根据WebBatchRequest图形化二次开发：增加了指纹识别模块，可识别大概上千条指纹，增加了IP段处理，支持C段和B段处理，增加了301处理,增加了去重空节点的功能，可节省内存消耗,推荐勾选此选项

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

gd

godzilla

Godzilla source code

gost

GO Simple Tunnel - a simple tunnel written in golang

how-does-navicat-encrypt-password

This repository tells you how Navicat encrypts database password.

ibmyes

intranet-penetration

内网渗透必备工具。

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

iplocate

A python tool for ip->location

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

ki11y0u.github.io

learndocker

micro8

Gitbook

miscsecnotes

some learning notes about Web/Cloud/Docker Security、 Penetration Test、 Security Building

nishang

Nishang - PowerShell for penetration testing and offensive security.

nopac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user