xxnbyy Goto Github PK

esteemaudit-metasploit

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，均为亲测可用的脚本文件，优先更新高危且易利用的漏洞利用脚本，最近添加CVE-2020-1938、CVE-2020-2551、CVE-2019-2618、CVE-2019-6340

exploits

Exploits by 1N3@CrowdShield

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

f-middlewarescan

A vulnerability detection scripts for middleware services

f-middlewarescan-1

A vulnerability detection scripts for middleware services

fastjsonscan

fastjson漏洞burp插件，检测fastjson<1.2.68基于dnslog，fastjson<=1.2.24和1.2.33<=fatjson<=1.2.47的不出网检测和TomcatEcho,SpringEcho回显方案。

files

flannel

flannel is a network fabric for containers, designed for Kubernetes

freebsd

FreeBSD's source with custom patches

geetest

geetest，滑动验证码

gift

gitleak

GitLeak 是一个从 Github 上查找密码信息的小工具

hack.chat

a minimal, distraction-free chat application

hacks

A collection of hacks and one-off scripts

javadeserh2hc

Sample codes written for the Hackers to Hackers Conference magazine 2017 (H2HC).

jaws

JAWS - Just Another Windows (Enum) Script

jenkins

jenkins payload

jenkins-1

Jenkins漏洞探测、用户抓取爆破

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jndiexploit

A malicious LDAP server for JNDI injection attacks

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

masscanfmt

masscan scan result format - xml to txt

metasploit-framework

Metasploit Framework

micro8

Gitbook

middleware-vulnerability-detection

CMS、中间件漏洞检测利用合集 Since 2019-9-15

mimikatz

mitm-http-cache-poisoning

HTTP Cache Poisoning Demo

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

ms16-032

MS16-032(CVE-2016-0099) for SERVICE ONLY