no-github Goto Github PK

metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

mubeng

An incredibly fast proxy checker & IP rotator with ease.

mysql-fake-server

MySQL Fake Server (纯Java实现，内置常见Java反序列化Payload，支持GUI版和命令行版，提供Dockerfile)

mystikal

macOS Initial Access Payload Generator

nacosrce

Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

netspy

netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）

no-github

openredirex

A Fuzzer for OpenRedirect issues

pages

petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

pkinittools

Tools for Kerberos PKINIT and relaying to AD CS

postgresql_udf_help

PostgreSQL 提权辅助脚本

qvmtool

一款简单的qvm管理工具

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

rasmanpotato

Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do

redis-rogue-server-win

Redis 4.x & 5.x RCE

repos_sum

计算组织下所有仓库star和fork数

reverse_ssh

SSH based reverse shell

routevulscan

Burpsuite - Route Vulnerable Scanning 递归式被动检测脆弱路径的burp插件

rtspscan

scan rtsp

scfproxy

A proxy tool based on cloud function.

semantic-ui

Semantic is a UI component framework based around useful principles from natural language.

sharpdbeaver

DBeaver数据库密码解密工具

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

vcenterkiller

一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接

video-api-check

check hikvision/ys7 api

war3map

给年末 ctf 开发的魔兽地图,做个纪念

webcrack

WebCrack是一款web后台弱口令/万能密码批量检测工具，在工具中导入后台地址即可进行自动化检测。

wmiexec-pro

New generation of wmiexec.py

wspcoerce

PoC to coerce authentication from Windows hosts using MS-WSP