natsugaowatta Goto Github PK

blasting

ctf-srcs

Collect some funning CTF challenge source code.

exploits

Pwn stuff.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

how-to-exploit-a-double-free

How to exploit a double free vulnerability in 2021. 'Use-After-Free for Dummies'

my-re0-k8s-security

:atom: [WIP] 整理整理过去的分享，从零开始的Kubernetes攻防 ...

nopac

Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user

nopacscan

NoPacScan is a CVE-2021-42287/CVE-2021-42278 Scanner,it scan for more domain controllers than other script

pentest-and-development-tips

A collection of pentest and development tips

redis-rogue-server

Redis 4.x/5.x RCE

secdictionary

实战沉淀字典

secopsdev

自己闲来无事所写以及工作中抽取的安全/运维/开发方面的小脚本

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

ysoserial-1

ysoserial for su18