root13920 Goto Github PK
Type: User
Type: User
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新
2022 护网行动 POC 整理
2022hw漏洞消息与poc&exp分享
360 QuakeAPI批量查询工具
404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目
Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.
A cheat sheet that contains advanced queries for SQL Injection of all types.
阿里云accesskey利用工具
本项目集成了全网优秀的攻防工具项目,包含自动化利用,子域名、敏感目录、端口等扫描,各大中间件,cms漏洞利用工具以及应急响应等资料。
内网自动化快速打点工具|资产探测|漏洞扫描|服务扫描|弱口令爆破
asset-scan是一款适用甲方企业的外网资产周期性扫描监控系统
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。傻瓜式导入url即可实现批量getshell。批量自动化测试。例如:Thinkphp,Struts2,weblogic。出现的最新漏洞进行实时跟踪并且更新例如:log4jRCE,向日葵RCE 等等.
一个自动执行任务的工具,通过它可以实现账号自动签到,自动领取权益等功能,帮助我们轻松升级
A curated list of amazingly awesome Burp Extensions
List of Awesome Red Teaming Resources
備份數據腳本
exp/lists相关集合💥用友NC反序列化/CTF/Java Deserialization/cnvd&cve Vulns/log4j2/hikvision-decrypter...✨✨✨
Six Degrees of Domain Admin
一款用于辅助渗透测试工程师日常渗透测试的Burp被动漏扫插件
Burpsuite extension for log4j2rce
有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file
一个各种方式突破Disable_functions达到命令执行的shell
bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)
远控免杀系列文章及配套工具,汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术,并对免杀效果进行了一一测试,为远控的免杀和杀软对抗免杀提供参考。
**菜刀官方版本,拒绝黑吃黑,来路清晰
burp验证码识别接口调用插件
A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux
Cas反序列化漏洞利用工具,可回显
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.