k0bee Goto Github PK

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

starcoder

Home of StarCoder: fine-tuning & inference!

struts-s2-xxx

整理收集Struts2漏洞环境

struts2-rce

A Burp Extender for checking for struts 2 RCE vulnerabilities.

struts2-vuln-demo

Struts2漏洞实例源码

sts2g

Struts2漏洞扫描利用工具 - Golang版. Struts2 Scanner Written in Golang

sysmon-config

Advanced Sysmon configuration, Installer & Auto Updater with high-quality event tracing

szhe_scan

碎遮SZhe_Scan Web漏洞扫描器，基于python Flask框架，对输入的域名/IP进行全面的信息搜集，漏洞扫描，可自主添加POC

taoman

快速收集 https://src.edu-info.edu.cn 平台学校子域名工具

test

thrift

Apache Thrift

tidefinger

TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

tracecat

The open source Tines alternative. Automate security workflows at scale with code and no-code.

urlfinder

类似JSFinder的golang实现，更快更全更舒服

vcenterkit

Vcenter综合渗透利用工具包 | Vcenter Comprehensive Penetration and Exploitation Toolkit

vmware_escape

VMware Escape Exploit before VMware WorkStation 12.5.5

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

w12scan

🚀 A simple asset discovery engine for cybersecurity. (网络资产发现引擎)

w9scan

Plug-in type web vulnerability scanner

wails

Create beautiful applications using Go

watchad

AD Security Intrusion Detection System

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

webeye

weblogicscanner

weblogic 漏洞扫描工具。目前包含 CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551

wenda

闻达：一个LLM调用平台。为小模型外挂知识库查找和设计自动执行动作，实现不亚于于大模型的生成能力

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

windows_protocol

wooyun-payload

从wooyun中提取的payload，以及burp插件

x-crack

x-crack - Weak password scanner, Support: FTP/SSH/SNMP/MSSQL/MYSQL/PostGreSQL/REDIS/ElasticSearch/MONGODB