li8u99 Goto Github PK
Name: xiaotiejiang
Type: User
Twitter: qianlingshan
Name: xiaotiejiang
Type: User
Twitter: qianlingshan
2022 护网行动 POC 整理
将安卓远控Apk附加进普通的App中,运行新生成的App时,普通App正常运行,远控正常上线。Attach the Android remote control APK to a regular app. When the newly generated app is launched, the regular app operates as normal while the remote control goes online seamlessly.
一款适用于以HW行动/红队/渗透测试团队为场景的移动端(Android、iOS、WEB、H5、静态网站)信息收集扫描工具,可以帮助渗透测试工程师、攻击队成员、红队成员快速收集到移动端或者静态WEB站点中关键的资产信息并提供基本的信息输出,如:Title、Domain、CDN、指纹信息、状态信息等。
avList - 杀软进程对应杀软名称
platform for awd
适用AWD-WEB的各种场景下的攻击框架。
基于python+docker的AWD平台,用于内部对抗训练以及培训使用。用python来控制docker,用mysql来记录比赛过程。
备份文件信息泄露脚本与字典
BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.
一款基于BurpSuite的被动式FastJson检测插件
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
Check dnslog from ceye.io
Cloud Exploitation Framework 云环境利用框架,方便安全人员在获得 AK 的后续工作
CloudSecWiki is a cloud security oriented knowledge base maintained by HuoCorp.
cobaltstrike4.5版本破/解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证、修复CVE-2022-39197等
视频课件和工具分享
Some crypto tools I've written
CTF中常见目录字典
Personal CTF Toolkit
A denial-of-service proof-of-concept for CVE-2020-1350
Laravel debug rce
Sudo Baron Samedit Exploit
PoC for CVE-2021-4034
CVE-2021-4034 1day
CVE-2022-1292
CVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint
CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.