dongdabai Goto Github PK

post-hub

后渗透：学习、实战

pythonrce

r0capture

安卓应用层抓包通杀脚本

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

redteamnotes

红队笔记

reptile

LKM Linux rootkit

rogue-jndi

A malicious LDAP server for JNDI injection attacks

rootkits-list-download

This is the list of all rootkits found so far on github and other sites.

scmkit

Source Code Management Attack Toolkit

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

shellcode-injection-techniques

A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload. I will be building this project up as I learn, discover or develop more techniques. Some techniques are better than others at bypassing AV.

sherlockchain

SherlockChain is a streamlined AI analysis framework for Solidity, Vyper and Plutus contracts

shirovulnenv

Shiro内存马注入环境

shortpayload

通过字节码相关的技术，将Java反序列化Payload进行极致缩小，最高可以达到64.8%的缩小比例

smartcontracts-audit-checklist

A checklist of things to look for when auditing Solidity smart contracts.

spring-core-rce

Spring Core RCE

src-script

挖掘src常用脚本

tianqing

天擎终端安全管理系统SQL注入漏洞和未授权访问

ultimate-defi-research-base

Here we collect and discuss the best DeFI & Blockchain researches and tools. Feel free to DM me on Twitter or open pool request.

vuln-list

(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理，主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等，并且会持续更新。

weacon

Using WebShell implement CobaltStrike Beacon

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

weblogic-shiro-shell

WebLogic利用CVE-2020-2883打Shiro rememberMe反序列化漏洞，一键注册蚁剑filter内存shell

wenzhang

微信收藏的文章

ysoserial

在原有yso基础上实现依赖分离，内存马注入等功能。A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

zhouyu

（周瑜）Java - SpringBoot 持久化 WebShell 学习demo（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）

zscan

Zscan a scan blasting tool set