makefunny Goto Github PK

jdk

Source code for multiple JDK versions(1.6/1.7/1.8/1.9/10/11/12/13 JDK's src.zip), Only for learning; "rt_debug.jar" can be used for debugging.

jetbrains-agent

jetbrains-trial-reset

jndi

JNDI 注入利用工具

jsp-shell

simple jsp shell for use in pen testing once you have upload perms on a servlet container

jsp-shells

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jumpserver

JumpServer 是全球首款开源的堡垒机，是符合 4A 的专业运维安全审计系统。

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kubernetes

Production-Grade Container Scheduling and Management

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat、Struts2系列等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、LDAP、SmbHash、WmiHash)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike 3.X-4.0

leaf

Distributed ID Generate Service

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linux-kernel-exploitation

A collection of links related to Linux kernel exploitation

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

linuxcheck

linux信息收集/应急响应/常见后门/挖矿检测/webshell检测脚本

magnetw

磁力链接聚合搜索 - https://magnetw.app

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

marshalsec

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

memoryshelllearn

分享几个直接可用的内存马，记录一下学习过程中看过的文章

memshell

a webshell resides in the memory of java web server

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

micro8

Gitbook

mind-map

各种安全相关思维导图整理收集

model2fish

a dart library for gen fish-redux-template from model;

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

motrix

A full-featured download manager.