wafinfo Goto Github PK

activemq_putshell-cve-2016-3088

ActiveMQ_putshell直接获取webshell

al-waf

autodecoder

Burp插件，转发处理

bestshell

世界上最好用的php大马

bt_panel_privilege_escalation

宝塔面板Windows版提权方法

bypass

免杀shellcode

cobaltstrike

cobaltstrike插件

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penetration checklist

cve-2016-3088

cve-2021-22205

CVE-2021-22205& GitLab CE/EE RCE

decrypttools

DecryptTools-综合解密

dotnet-security-unit-tests

A web application that contains several unit tests for the purpose of .NET security

dylan903.github.io

ezoffice_decrypt

万户数据库解密

flash-pop

Flash钓鱼弹窗优化版

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hikvision

海康威视综合安防平台后渗透利用工具

java

关于学习java安全的一些知识,正在学习中ing,欢迎fork and star

jayus0821

jsp-webshell

single file jsp webshell, work on jdk5+

kab8345

ladss

PoC for LADSS (0day)

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

metersphere-plugin-backdoor

支持注入内存马和Bypass WAF

ms08_067

Updating MS08-067 Python exploit script

nctools

一款针对用友NC综合漏洞利用工具

nopac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

oa-seeyou

note

ojdkbuild

Community builds using source code from OpenJDK project

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.