thenullthe Goto Github PK

javaserializationtools

javaunserializeexploits

jsphorse

Super JSP Webshell

knowledge-base

Knowledge Base 慢雾安全团队知识库

log4j-affected-db

marshalsec

matryoshkadolltool

MatryoshkaDollTool-程序加壳/捆绑工具

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

ms15034scan

MS15034Scan / HTTP.SYS缓冲区溢出远程代码执行

ms17-010

An EternalBlue exploit implementation in pure go

ms17010-scan

MS17010 Scan / 转自长亭科技

mypack

加密壳

net_user_tools_bypass_hook_net.exe

绕过net监控小工具集

osstunnel

基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具

peiqi-wiki-poc

鹿不在侧，鲸不予游🐋

penetration_testing_poc

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest-tools

Intranet penetration tools

poc2jar

java编写，python作为辅助依赖的漏洞验证、利用工具，另外添加了进程查找模块、编码模块、命令模块、常见漏洞利用GUI模块，加快测试效率

pocassistdb

database of pocassist（漏洞库）

r77-rootkit

Ring 3 rootkit with single file installer and fileless persistence that hides processes, files, network connections, etc.

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

rocb

鹏 RocB - Java代码审计IDEA插件 SAST

sharprdplog

Windows rdp相关的登录记录导出工具，可用于后渗透中Windows服务器的信息收集阶段。输出内容包括：本地rdp端口、mstsc缓存、cmdkey缓存、登录成功、失败日志事件。

shellcodeloader

将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术。

shellcodeloader-1

shellcodeloader

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

socks_proxy

socks5 proxy server in C

sshcheck

Code By:Tas9er / SSH弱口令爆破助手

sshlooterc

It's the C version of https://github.com/mthbernardes/sshLooter