jack1024z Goto Github PK
Type: User
Type: User
Main Sigma Rule Repository
各种漏洞poc、Exp的收集或编写
splunk
针对SpringBoot的开源渗透框架,以及Spring相关高危漏洞利用工具
SpringBoot 相关漏洞学习资料,利用方法和技巧合集,黑盒安全评估 check list
🚀 一款为了学习go而诞生的漏洞利用工具
Spring漏洞综合利用工具
工欲善其事,必先利其器
挖掘src常用脚本
主流供应商的一些攻击性漏洞汇总
提权;Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019
Modifying SweetPotato to support load shellcode and webshell
Useful sed scripts & patterns.
一款针对Vcenter的综合利用工具,包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j,提供一键上传webshell,命令执行或者上传公钥使用SSH免密连接
一个Vulhub漏洞复现知识库
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
(持续更新)对网上出现的各种OA、中间件、CMS等漏洞进行整理,主要包括漏洞介绍、漏洞影响版本以及漏洞POC/EXP等,并且会持续更新。
收集、整理、修改互联网上公开的漏洞POC
此项目将不定期从棱角社区对外进行公布一些最新漏洞。
收集的文章;HW;Pentest;
基于 docsify 部署,目前漏洞数量 1000+
WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
Web Attack Cheat Sheet
Web Fuzzing Box - Web 模糊测试字典与一些Payloads,主要包含:弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例:https://gh0st.cn/archives/2019-11-11/1
WEB安全手册(红队安全技能栈),漏洞理解,漏洞利用,代码审计和渗透测试总结。【持续更新】
weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
This project is only used for vulnerability verification to help security engineers better understand the system and carry out repair work. Please do not use it for other purposes.
Real-world infosec wordlists, updated regularly
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.