yogistudio Goto Github PK

image_invert

CTF image invert

information-security

信息安全资料整理

insert_update_injectioncode

insert&&update注入测试代码

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

jadx

Dex to Java decompiler

java-compressed-file-security

java web 压缩文件 安全 漏洞

javaserializationtools

johntheripper

This is the official repo for John the Ripper, "Jumbo" version. The "bleeding-jumbo" branch is based on 1.9.0-Jumbo-1 which was released on May 14, 2019. An import of the "core" version of john this jumbo was based on (or newer) is found in the "master" branch (CVS: https://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/john/john/src/).

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kalitools

Kali Linux工具清单

ladon

大型内网渗透扫描器&Cobalt Strike，包含信息收集/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、Weblogic、ActiveMQ、Tomcat等，密码口令爆破含(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB)等,可高度自定义插件支持.NET程序集、DLL(C#/Delphi/VC)、PowerShell等语言编写的插件,支持通过配置INI批量调用任意外部程序或命令,EXP生成器一键生成Web漏洞POC,可快速扩展扫描或利用能力。支持Cobalt Strike插件化直接内存加载Ladon扫描快速拓展内网横向移动

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

learningdjango-1-4

lfi-labs

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

libc-database

Build a database of libc offsets to simplify exploitation

linpeas

linux_auto_xunjian

linux自动化巡检工具

linux_exploit_suggester

Linux Exploit Suggester; based on operating system release number

log-killer

Clear all your logs in [linux/windows] servers 🛡️

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mitre-att-ck-cn

mssql-command-tool

mssql 终端连接工具|命令执行

my-ctf-challenges

CTF challenges I created

my-ctf-web-challenges

Collection of CTF Web challenges I made

myarticles

蒸米的文章（iOS冰与火之歌系列，一步一步学ROP系列，安卓动态调试七种武器系列等）

mybookshelf

一款可以优雅的阅读本地小说以及大量网络小说的APP

mybookshelf-1

阅读是一款提供网络文学搜索的工具，为广大网络文学爱好者提供一种方便、快捷舒适的试读体验。

myfuzz

从总多目录字典中合并提取的高效目录爆破字典

mysql_fuzz

MySQL注入FUZZ工具