j1anfen Goto Github PK

jackson-rce-via-spel

An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions

jsrat-py

This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled.

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

justtrustme

An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning

kdriver-fuzzer

linkfinder

A python script that finds endpoints in JavaScript files

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

memcachedos

Memcache 反射攻击脚本 工具 nodejs ddos

myjsrat

This is JSRat.ps1 in Python

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nxcrypt

NXcrypt - 'python backdoor' framework

odat

ODAT: Oracle Database Attacking Tool

python_sec

python安全和代码审计相关资料收集 resource collection of python security and code review

qq-group-members

QQ Group Members （QQ 群成员导出）

qq-groups-spider

QQ Groups Spider（QQ 群爬虫）

redismodules-executecommand

Tools, utilities and scripts to help you write redis modules!

sec-chart

安全思维导图集合

sharp-wmiexec

shiro_attack

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）

shiro_rce_exp

Shiro RCE (Padding Oracle Attack)

sqliscanner

Automatic SQL injection with Charles and sqlmap api

upload-labs

一个帮你总结所有类型的上传漏洞的靶场

usb-rubber-ducky

vcg

VisualCodeGrepper - Code security scanning tool.

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

vulhub

Docker-Compose file for vulnerability environment

weblogic_wls_wsat_rce

forked from https://github.com/s3xy/CVE-2017-10271. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.Modified by hanc00l

wechat-toolbox

WeChat toolbox（微信工具箱）

windows-kernel-exploits

windows-kernel-exploits Windows平台提权漏洞集合

xadmin

Drop-in replacement of Django admin comes with lots of goodies, fully extensible with plugin support, pretty UI based on Twitter Bootstrap.