katsec Goto Github PK

fastjson_rce_tool

fastjson_rce工具，不用搭建HTTP服务，不受JDK版本限制

fingerprint

各种工具指纹收集分享

fscan-poc

强化fscan的漏扫POC库

fuzzdb-collect

网络上安全资源的搜集

imap_bruteforce

IMAP Bruteforce Script

img

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

ios-ssl-kill-switch

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS Apps

jndiexploit-0x727

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

katsec.github.io

blog

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file (Windows提权漏洞合集) http://kernelhub.ascotbe.com/

kibana-rce

kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

mail-probe

邮箱探针后台管理系统

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

memscan

A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.

middleware-vulnerability-detection

CMS、中间件漏洞检测利用合集 Since 2019-9-15

mnscan

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

net_user_tools_bypass_hook_net.exe

绕过net监控小工具集

nmapautomator

A script that you can run in the background!

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

post-hub

内网渗透：C2、免杀、代理、横向

r0capture

安卓应用层抓包通杀脚本

rce-over-spark

Remote Command Execution Over Spark

recon

自动化护网/SRC致富脚本

redis-rogue-server

Redis 4.x/5.x RCE

redteam-tips

关于红队方面的学习资料

redteamer

红方人员作战执行手册