hackeyes Goto Github PK

springboot-scan

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

st2-046-poc

st2-046-poc CVE-2017-5638

st2-048

st2-048

tcm-tools

支持国密sm2，sm3，sm4等算法的TCM软件工具包

timely

Accumulo backed time series database

tls-scanner

The TLS-Scanner Module from TLS-Attacker

tongdaoa-exp

TongdaOA 11.7 ~11.8 通达OA，任意用户登录+后台getshell

tpscan

一键ThinkPHP漏洞检测

tunna

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments.

unfetter

Identifies defensive gaps in security posture by leveraging Mitre's ATT&CK framework. iadgov

upload-labs

一个帮你总结所有类型的上传漏洞的靶场

urlooker

enterprise-level websites monitoring system

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

vmware_vcenter_cve_2020_3952

Exploit for CVE-2020-3952 in vCenter 6.7

vulapps

快速搭建各种漏洞环境(Various vulnerability environment)

vulhub

Docker-Compose file for vulnerability environment

vuln_store

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

walkoff

An active cyber defense development framework enabling orchestration capabilities to be written once and deployed across WALKOFF-enabled orchestration tools. iadgov

walkoff-apps

WALKOFF-enabled applications. iadgov

wdscanner

WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。

weaver_exp

泛微OA漏洞综合利用脚本

webshell

This is a webshell open source project

webshell-sample

webshell sample

windows-event-log-messages

Retrieves the definitions of Windows Event Log messages embedded in Windows binaries and provides them in discoverable formats. iadgov

wireshark-tutorial-decrypting-https-traffic

xss-payload-list

Cross Site Scripting ( XSS ) Vulnerability Payload List 🚀

xunfeng

巡风是一款适用于企业内网的漏洞快速应急，巡航扫描系统。

xxepayload

yasso

强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）