ostrichsec Goto Github PK

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

postshell

PostShell - Post Exploitation Bind/Backconnect Shell

probable-wordlists

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

procdump-for-linux

A Linux version of the ProcDump Sysinternals tool

proxyhunter

获取网上可用的http proxy

proxyhunter-1

这是一段用来从http://www.cnproxy.com/批量获取免费代理服务器的脚本

proxyhunter-2

Open Proxy Hunter

red_team_tool_countermeasures

rogue-jndi

A malicious LDAP server for JNDI injection attacks

saltstack-exp

CVE-2020-11651&&CVE-2020-11652 EXP

shadowbroker

The Shadow Brokers "Lost In Translation" leak

shiro-exp

shiro550-exp

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

shiro_exp

shiro_rememberme 反序列化漏洞 利用EXP

shiro_exploit

Apache Shiro 反序列化漏洞检测与利用工具

shiro_poc

shiro_xray

CommonsBeanutils1,CommonsCollectionsK1

smbghost

Scanner for CVE-2020-0796 - SMBv3 RCE

smbghost_rce_poc

socks

一款全平台SOCKS5代理服务器软件

socks_server

一个socks服务器的实现.

solr_rce

Apache Solr RCE via Velocity template

spider_xianzhi

先知社区爬虫：爬先知文章存储到mongo数据库

sslscan

sslscan tests SSL/TLS enabled services to discover supported cipher suites

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

superwordlist

基于实战沉淀下的各种弱口令字典

thinkphpgui

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

threathunter-playbook

A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.

venom

Venom - A Multi-hop Proxy for Penetration Testers