badguy0827 Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

1earn

ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

as_webshell_venom

免杀webshell无限生成工具蚁剑版

axis-1.4-rce-poc

Axis <=1.4 远程命令执行（RCE） POC

barmie

Java RMI enumeration and attack tool.

black-hat-go

《Black.Hat.Go》中文翻译

bloodhound

Six Degrees of Domain Admin

browserghost

这是一个抓取浏览器密码的工具，后续会添加更多功能

bypass-av-note

免杀技术大杂烩---乱拳也打不死老师傅

bypassav

借助Win-PS2EXE项目编写cna脚本方便快速生成免杀可执行文件

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

coercer

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

cve-2019-2725

CVE-2019-2725 命令回显

cve-2020-15148-bypasses

几条关于CVE-2020-15148（yii2反序列化）的绕过

cve-2021-22005

cve-2021-25641-proof-of-concept

Apache/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Different Gadgets

cve-2021-34486

Windows Etw LPE

exploits

Pwn stuff.

fastjson

Fastjson姿势技巧集合

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

getipinfo

用于寻找多网卡主机方便内网跨网段渗透避免瞎打找不到核心网

go-mimikatz

A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.

go-shadowsocks2

Modern Shadowsocks in Go

h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

hackjava

《深入理解Java代码审计》

hellgateloader_csharp

Load shelcode via HELLGATE, rewrite hellgate for learning purpose.

impacket

Impacket is a collection of Python classes for working with network protocols.

invoke-obfuscation

PowerShell Obfuscator

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

maketoolkit-db

Search database collection from github project or internet.