hypdncy Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

administrative-divisions-of-china

中华人民共和国行政区划：省级（省份）、 地级（城市）、 县级（区县）、 乡级（乡镇街道）、 村级（村委会居委会） ，**省市区镇村二级三级四级五级联动地址数据。

android_device_xiaomi_dipper

blackdex

BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

burpunexinfo

一种收集敏感信息的Burp插件

coremailuploadrce

Coremail任意文件上传漏洞POC

csdncodeautoopen

CSDN代码自动展开插件

dasda

dnslog

增加basic auth

dumpdex

My first xposed item, copy wrbug

fastjson_rce_tool

fastjson命令执行自动化利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP，LDAP反序列方式部分回显

fingerprinthub

侦查守卫(ObserverWard)的指纹库

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

goby-pocs

List of pocs for goby

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

gordp

RDP client by Golang

grdp

pure golang rdp protocol

hburp

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jndibypassexploit

JndiBypass漏洞利用

jsproxy

一个利用浏览器当代理的demo项目,让所有访问者的浏览器成为自己的代理池，所到之处皆为代理节点.

jyso

qi4L大哥原版的修改版本，有小部分代码的变化

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

nessustoreport

Nessus扫描报告自动化生成工具

note

笔记

openark

OpenArk is an open source anti-rookit(ARK) tool for Windows.

project-layout

Standard Go Project Layout

pyvulhunter

python audit tool 审计 注入 inject

red-teaming-toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

report

乙方渗透测试漏洞报告管理系统