qianniaoge's Projects
SSRF plugin for burp Automates SSRF Detection in all of the Request
SSRF (Server Side Request Forgery) testing resources
国光的手把手带你用 SSRF 打穿内网靶场源码
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
SSRF testing tool
A set of Code-ql/Joern queries to find vulnerabilities
Scans for accessibility tools backdoors via RDP
👻Stowaway -- Multi-hop Proxy Tool for pentesters
Python2编写的struts2漏洞全版本检测和利用工具
s2-057 最新漏洞分析和EXP脚本
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
一款针对向日葵的识别码和验证码提取工具
向日葵 RCE
向日葵RCE漏洞批量检测工具
某日葵远程rce
向日葵RCE,网段扫描/中文显示
SuperDllHijack:A general DLL hijack technology, don't need to manually export the same function interface of the DLL, so easy! 一种通用Dll劫持技术,不再需要手工导出Dll的函数接口了
主流供应商的一些攻击性漏洞汇总
Suricata IDS rules 用来检测红队渗透/恶意行为等,支持检测CobaltStrike/MSF/Empire/DNS隧道/Weevely/菜刀/冰蝎/挖矿/反弹shell/ICMP隧道等
集合渗透测试常用工具进行一键扫描的缝合怪
svc WebShell
自动化爬取并自动测试所有swagger接口
swagger-ui 接口发送工具
深信服零信任沙箱逃逸( 正常功能,所以我也不打算再提交CNVD, 给使用这款产品的用户介绍下功能效果)
数据库综合利用工具
Scriptable database and system performance benchmark
Utilities for Sysmon
AV/EDR evasion via direct system calls.
剑指钓鱼基建快速部署自动化