she11c0der Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

antsword

AntSword is a cross-platform website management toolkit.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-static-analysis

A curated list of static analysis tools, linters and code quality checkers for various programming languages

awvs_script_decode

解密好的AWVS10.5 data/script/目录下的脚本

blueshell

红蓝对抗跨平台远控工具

burpy

A plugin that allows you execute python and get return to BurpSuite.

cobra

Cobra - Cobra is a static code analysis system that automates the detecting vulnerabilities and security issue.(白盒代码安全审计系统)

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2018-8174_exp

CVE-2018-8174_python

cve-2021-22005-exp

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

eslint-config-scanjs

umbrella config to achieve scanjs-like functionality through eslint

fenghuangscanner

fenghuangscanner_v3

gwhatweb

CMS识别 python gevent实现

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

it-ebooks-archive

:books: 计算机开放电子书（不完全）汇总

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-rce-echo

Java RCE 回显测试代码

java-web-security

Java-Web-Security - Sichere Webanwendungen mit Java entwickeln

javaid

java source code danger function identify prog

javaweb-codereview

javaweb-codereview

javaweb-sec

攻击Java Web应用-[Java Web安全]

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

jspfinder

一款通过污点追踪发现Jsp webshell的工具(A tool to find Jsp Webshell through stain tracking)

linux_kernel_exploits

I will publish some Linux kernel exploits for various real world kernel vulnerabilities here. the samples are uploaded for education purposes for red and blue teams.

maven-security-versions

Identify vulnerable libraries in Maven dependencies

micro8

Gitbook

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.