nokduro-security Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

2018_tdctf

2018 TenDollar CTF

android-ssl-bypass

Black box tool to bypass SSL verification on Android, even when pinning is used.

apache-log4j-poc

Apache Log4j 远程代码执行

badgehacking

bluekeep

Proof of concept for CVE-2019-0708

cmd.jsp

A super small jsp webshell with file upload capabilities.

cobaltstrikesource

Cobaltstrike4.1 Source

damn-vulnerable-bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android application security hacking skills.

evildll

Malicious DLL (Reverse Shell) generator for DLL Hijacking

firmware-security-training

Intel ATR Training: Security of BIOS/UEFI System Firmware from Attacker and Defender Perspectives

helloexp-0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

how2heap

A repository for learning various heap exploitation techniques.

jackson-rce-via-spel

An example project that exploits the default typing issue in Jackson-databind via Spring application contexts and expressions

jaek

This is the repository for JÄk. I created it as prototype during my masterthesis.

javasec

a rep for documenting my study, may be from 0 to 0.1

medusa

Binary instrumentation framework based on FRIDA

networksniffer

Log iOS network traffic without a proxy

onelistforall

Rockyou for web fuzzing

pentestgpt

A GPT-empowered penetration testing tool

php7-internals

Research about the Zend Engine

pwdb-public

A collection of all the data i could extract from 1 billion leaked credentials from internet.

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

saferwall

A hackable malware sandbox for the 21st Century

tai-e

An easy-to-learn/use static analysis framework for Java

tunproxy

Android VPN interceptor to send HTTP and HTTPS traffic to a proxy

uac_bypass_in_the_wild

Windows 10 UAC bypass for all executable files which are autoelevate true .

vlmcsd

KMS Emulator in C (currently runs on Linux including Android, FreeBSD, Solaris, Minix, Mac OS, iOS, Windows with or without Cygwin).

xss-payloads

List of XSS Vectors/Payloads