sevck Goto Github PK

java_unserialize

java unserialize vulnerability payload

jdwp-shellifier

jenkins-cli-exploit

Jenkins CommonCollections Exploit

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jxwaf

JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的下一代web应用防火墙

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

knock

Knock Subdomain Scan

laravel-poc-cve-2018-15133

PoC for CVE-2018-15133 (Laravel unserialize vulnerability)

ldap-log

一个LDAP请求监听器，摆脱dnslog平台和java

livemapdemo

地图实时攻击演示

manalyze

A static analyzer for PE executables.

marshalsec

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

microtip

💬 Minimal, accessible, ultra lightweight css tooltip library. Just 1kb.

mit-deep-learning-book-pdf

MIT Deep Learning Book in PDF format (complete and parts) by Ian Goodfellow, Yoshua Bengio and Aaron Courville

mlaction

Matching Learning action codes.

mssql-fileless-rootkit-warsqlkit

Bildiğiniz üzere uzun zamandır MSSQL üzerine çalışmalar yapmaktayım. Bu yazımda uzun zamandır uğraştığım bir konuyu ele alacağım, MSSQL Rootkit. Bildiğiniz üzere şimdiye kadar MS-SQL için anlatılan post-exploitation işlemlerinin büyük çoğunluğu “xp_cmdshell” ve “sp_OACreate” stored procedure’lerini kullanarak anlatılır. Peki xp_cmdshell ve sp_OACre

multisearch-v2

http://x0day.me/index.php/archives/multisearch-v2.html

mysql-unsha1

Authenticate against a MySQL server without knowing the cleartext password

mysqlfuzz

针对指定ip段的mysql爆破

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

noeye

A blind mode exploit framework (a dns server and a web app) that like wvs's AcuMonitor Service or burpsuite's collabrator or cloudeye

oneshellcrack

a very very fast brute force webshell password tool

openrasp

Open source RASP solution

openstar

lua waf,nginx+lua,openresty,luajit,waf+,cdn,nginx

openvpn-install

Improved OpenVPN installer for Debian, Ubuntu, CentOS and Arch Linux

pastejacking

A demo of overriding what's in a person's clipboard

php-parser

A PHP parser written in PHP

poc

poc from bugscan beebeeto

poc-t

渗透测试插件化并发框架