m00nt0 Goto Github PK

pyyso

pyyso is a Python package that generate java serialized poc. Including CommonsCollections1-7, JDK7u21, JDK8u20, ldap for jndi, shiro-550, CommonsBeanutils1 no cc, JRMPClient, high version JDK Bypass, Fake MySQL for JDBC attack

rdphijack-bof

Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.

rdpthief_tools

窃取mstsc中的用户明文凭据

redis-rce

Redis 4.x/5.x RCE

redisexp

Redis 漏洞利用工具

remotecontrol

远程控制软件

reptile

LKM Linux rootkit

revsocks

Reverse SOCKS5 implementation in Go

sanfor_log_center_rce_poc

sanfor_log_center_rce_poc

scan4all

基于优化后的vscan，继续走更多集成、自动化功能，集成subfinder（子域名爆破）、naabu(集成nmap，端口扫描、服务识别)、httpx(web扫描)、nuclei(漏洞扫描)、kscan 11种弱口令检测...

scfproxy

A little proxy tool based on Tencent Cloud Function Service.

scloader

CS shellcode 加载器

seeyonexp

sharpzerologon

Zerologon Exploiter I used on Cobalt Strike

shellcode_execute

shiro-721

Shiro-721 RCE Via RememberMe Padding Oracle Attack

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

sigflip

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

ssrf_redis_getshell

通过ssrf漏洞对redis资产进行getshell的常见姿势

suidcheck

Linux SUID 提权检测脚本，自动分析具有 s 权限的可执行文件并给出相应的提权利用方法

sunflower_get_password

一款针对向日葵的识别码和验证码提取工具

superxss

Make XSS Great Again

sysproxy

System Proxy Agent for Shadowsocks Windows

systemsecurity-reverseanalysis

该资源为系统安全和逆向分析实验，包括作者从零学习恶意代码分析、病毒逆向分析的工具及样本，基础性文章，希望对您有所帮助~

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

taskshell

tomcat-backdoor

tramphook

x86 Trampoline Hook

tsh-go

Tiny SHell Go - An open-source backdoor written in Go

ttscan