lworld0x00 Goto Github PK

pasc2at

高级PHP应用程序漏洞审核技术 by 80vul

php-code-audit

php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp

php-meminfo

PHP extension to get insight about memory usage

phpcodz

Php Codz Hacking

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

procfilter

A YARA-integrated process denial framework for Windows

proxy-attackchain

proxylogon, proxyshell, proxyoracle and proxytoken full chain exploit tool

py-mysql-elasticsearch-sync

MySQL to Elasticsearch sync tool, written in Python.

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

s_task

awaitable coroutine library for C

sam-the-admin

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sharpcollection

Nightly builds of common C# offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines.

sharpefspotato

Local privilege escalation from SeImpersonatePrivilege using EfsRpc.

silketw

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

static-analysis

静态分析

sysmoneop

thehivedocs

Documentation of TheHive

v8-vulnerabilities

Corpus of public v8 vulnerability PoCs.

vulnerability-lab

漏洞研究☞OA/中间件/框架/路由器...

wechatrobot

PC版微信机器人

weird_proxies

Reverse proxies cheatsheet

windowsvulnscan

ysoserial.net

Deserialization payload generator for a variety of .NET formatters