jerrynotme Goto Github PK

e-officegetshell

泛微E-Office文件上传漏洞（CNVD-2021-49104）

easywatermark

🔒 🖼 Securely, easily add a watermark to your sensitive photos. 安全、简单地为你的敏感照片添加水印，防止被小人泄露、利用

ecapture

Capture SSL/TLS text content without a CA certificate using eBPF. This tool is compatible with Linux/Android x86_64/Aarch64.

emailsender

钓鱼邮件便捷发送工具（GUI）

exp_hub

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

faketoa

Fake IP sources using Linux's BPF feature

fenjing

专为CTF设计的Jinja2 SSTI全自动绕WAF脚本 | A Jinja2 SSTI cracker for bypassing WAF, design for CTF

fofa-gui

Fofa采集工具-自修改版本

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

gitmad

Monitor, Alert, and Discover sensitive info and data leakage on Github.

gui_tools

一个由各种图形化渗透工具组成的工具集

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

hikvision-xor-decrypter

Used for breaking XOR encryption on Hikvision configuration files that have been decrypted using aes-128-ecb

imonitor

iMonitor（冰镜 - 终端行为分析系统）

ingram

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

installerfiletakeover

ios_15_rce

Remote Code Execution V1 For iOS 15 sent through airdrop after the device was connected to a trusted host

jar-analyzer-gui

一个用于分析Jar包的GUI工具，可以用多种方式搜索你想要的信息，自动构建方法调用关系，支持分析Spring框架（A Java GUI Tool for Analyzing Jar）

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

jumpserver

JumpServer 是广受欢迎的开源堡垒机，是符合 4A 规范的专业运维安全审计系统。

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

log4jscanburp

malware

macOS Malware Collection

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

metabase

The simplest, fastest way to get business intelligence and analytics to everyone in your company :yum:

metasploit-framework

Metasploit Framework