heartsleep Goto Github PK

demo

1.33

dkmc

DKMC - Dont kill my cat - Malicious payload evasion tool

dllhijackingscanner

This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification.

dongtai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

druid

阿里巴巴计算平台事业部出品，为监控而生的数据库连接池

embedded-toolkit

iot固件工具

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat的漏洞利用脚本，优先更新高危且易利用的漏洞利用脚本，最新添加CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2019-2618、CVE-2019-6340

exploitdb

The official Exploit Database repository

facebook-bugbounty-writeups

Collection of Facebook Bug Bounty Writeups

fact_core

Firmware Analysis and Comparison Tool

fastjson_rec_exploit

fastjson一键命令执行

findclassinjars

个人用于在自动化挖掘gadget时，方便查找gadget chains中class所在jar包，以助于便捷审计测试gadget的有效性。

findhash

一个IDA脚本，可以检测出哈希算法（无论是否魔改常数）并生成frida hook 代码。

firmeye

IoT固件漏洞挖掘工具

firmwalker

Script for searching the extracted firmware file system for goodies!

fofaloved

fofa普通会员 5000条数据download script && 高级会员导入数据库 script

fortify

源代码漏洞の审计

fortify-license-crack

fortify-license-crack

framescan

FrameScan 一款python3编写的简易的cms漏洞检测框架

frida

Frida scripts for mobile application dynamic-analysis.

fridauitools

frida工具的缝合怪

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzuf

Fuzzing Unification Framework

fuzz_waf

gadgetinspector

一个通过分析字节码进行污点分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。加入了挖掘Fastjson反序列化gadget chains（曾使用它挖掘到了Fastjson、Jackson通用的gadget chain）和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。

gadgetprobe

Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.

gallia

Extendable Pentesting Framework

ggscan

一款渗透时快速资产探测工具