dienuet Goto Github PK

asp.net-memshell-scanner

asp.net内存马检测工具

awesome-cloudsec-labs

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

certipy

Tool for Active Directory Certificate Services enumeration and abuse

crossdomain

CORS checking

dienuet.github.io

docs-refers

tech blogs or writeups

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

godpotato

graphme

a dirty tool to beautify GraphQL Schema Introspection

invoke-thehash

PowerShell Pass The Hash Utils

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-js-engine-payloads

Java Js Engine Payloads All in one

java-memshell-scanner

通过jsp脚本扫描java web Filter/Servlet型内存马

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

memoryshell

内存马调试

netexec

The Network Execution Tool

offsec-tools

Compiled tools for internal assessments

parampampam

payload-tools-stuff

phpggc

pivotnacci

A tool to make socks connections through HTTP agents

postmessage-logger

Simple "postMessage logger" Chrome extension

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

redteam-research

Collection of PoC and offensive techniques used by the BlackArrow Red Team

reposcanner

Python script to scan Git repos for interesting strings

security

Stuff about it-security that might be good to know

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpmemshell

Memshell