lengyun123456 Goto Github PK

http-auth-bruteforcer

HTTP Authentication Bruteforcer

httpshell

SSH like Shell via http protocol

hydrogen-pass

JavaFX based personal desktop password manager

ico-spider

icsmaster

整合工控安全相关资源（ICS/SCADA Security Resource）

icstools

ics security tools

in-spectre-meltdown

This tool allows to check speculative execution side-channel attacks that affect many modern processors and operating systems designs. CVE-2017-5754 (Meltdown) and CVE-2017-5715 (Spectre) allows unprivileged processes to steal secrets from privileged processes. These attacks present 3 different ways of attacking data protection measures on CPUs enabling attackers to read data they shouldn't be able to. This tool is originally based on Microsoft: https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in

insectsawake

Network Vulnerability Scanner

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

interview_internal_reference

2019年最新总结，阿里，腾讯，百度，美团，头条等技术面试题目，以及答案，专家出题人分析汇总。

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

invoke-bsod

For when you want a computer to be done - without admin!

iotdb

Nmap scans of Internet of Things devices

iotseeker

Created by Jin Qian via the GitHub Connector

isniff-gps

Passive sniffing tool for capturing and visualising WiFi location data disclosed by iOS devices

ivideo

一个可以观看国内主流视频平台所有视频的客户端（Mac、Windows、Linux） A client that can watch video of domestic(China) mainstream video platform

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jackson-rce-via-spel

An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

javaprobe

一款Java应用运行时信息收集工具

jdsrc-small-classroom

京东SRC小课堂系列文章

jenkins-preauth-rce-poc

Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-1003000, CVE-2018-1999002, and more)

jenkins-scripts

Scripts in Groovy, shell, Ruby, Python, whatever for managing/interacting with Jenkins

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jsonp_info_leak

jsonp隐私泄漏发现

jsql-injection

jSQL Injection is a Java application for automatic SQL database injection.

jxwaf

JXWAF(锦衣盾)是一款基于openresty(nginx+lua)开发的下一代web应用防火墙

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kam1n0-community

The Kam1n0 Assembly Analysis Platform

kamerka

Build interactive map of cameras from Shodan