ba0zi Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

30-seconds-zh_cn

📙 前端知识精选集，包含 HTML、CSS、JavaScript、React、Node、安全等方面，每天仅需 30 秒。

abptts

TCP tunneling over HTTP/HTTPS for web application servers

aggressorscript-rundumphash

AggressorScript-RunDumpHash

aliyun-cli

Alibaba Cloud CLI

antispy

AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

awesome-red-teaming

List of Awesome Red Teaming Resources

ba0zi

Config files for my GitHub profile.

bailu-sed-tool

白鹿社工字典生成器，灵活与易用兼顾。

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cactustorch

CACTUSTORCH: Payload Generation for Adversary Simulations

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

chunk-proxy

chunked-coding-converter

Burp suite 分块传输辅助插件

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobalt_strike_wiki

Cobalt Strike系列

confluence

cs-checklist

PC客户端（C-S架构）渗透测试checklist / Client side(C-S) penestration checklist

ctftool

Interactive CTF Exploration Tool

cve-2020-0688

cve-2020-0688

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2022-0995

CVE-2022-0995 exploit

cve-2022-39197

CobaltStrike <= 4.7.1 RCE

dnfhelper-c

C++ 地下城与勇士-辅助

dnfhelper-python

Python-地下城与勇士-dnf工具

dnslivery

Easy files and payloads delivery over DNS

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

eventlogmaster

Cobalt Strike插件 - RDP日志取证&清除

exchange-ssrf-rce

exchange-ssrf-rce