mstheholy Goto Github PK

javasecinterview

Java安全研究与安全开发面试题库，同是也是常见知识点的梳理和总结，包含问题和详细的答案，计划定期更新

jd_scripts

lxk0301/jd_scripts备份。不要star。不要fork。谢谢配合。

jd_scripts-1

lazyida

Make your IDA Lazy!

lumen

A private Lumina server for IDA Pro

luwu

红队基础设施自动化部署工具

note163checkin

基于Github Actions的有道云笔记每日签到

online-tools

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BIG-IP-CVE-2021-22986/Sonicwall-SSL-VPN-RCE/GitLab-Graphql-CNVD-2021-14193/D-Link-DCS-CVE-2020-25078/WLAN-AP-WEA453e-RCE/360TianQing-Unauthorized/360TianQing-SQLinjection/FanWeiOA-V8-SQLinjection/QiZhiBaoLeiJi-AnyUserLogin/QiAnXin-WangKangFirewall-RCE/金山-V8-终端安全系统/NCCloud-SQLinjection/ShowDoc-RCE

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

ptrace

a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志

ptyshell

A reverse PTY shell in C

redis-getshell

Redis 未授权检测,密码爆破,Webshell写入,SSH公私钥写入,定时计划反弹Shell.

secondarydevcobaltstrike

二次开发过后的CobaltStrike,版本为4.1.在原来CobaltStrike的基础上修改多处特征,解决流量查杀问题.

serialwriter

SerialWriter is an incomplete implementation of Java serialization for study of Java deserialization vulnerabilities.

shell-backdoor

A repository that holds all 22XploiterCrew "Shell Backdoor"

sign_bot

自动签到

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

taowu-cobalt-strike

trackray

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

volatility-auto-hashdump

Script for automatic dump and brute-force hashes using Volatility Framework

volatility3

Volatility 3.0 development

vulnerability-wiki

一个综合漏洞知识库，集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库

wordpress-brute-force

Super fast login WordPress Brute Force

wsmemshell

WebSocket 内存马，一种新型内存马技术

xortool

A tool to analyze multi-byte xor cipher

youdaonote-pull

📝 一个一键导出 / 备份「有道云笔记」所有笔记的 Python 脚本。 A Python script to export/backup all the notes of the "Youdao Note".

z1-aggressorscripts

适用于Cobalt Strike的插件

zeratool

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems