shad0wpf Goto Github PK

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

aboutsecurityppt

安全方面的议题PPT

aviator

Antivirus evasion project

awesome-incident-response

A curated list of tools for incident response

awvs-decode

awvs script decode 最新最好的解码方法

bbscan

A tiny Batch weB vulnerability Scanner

betaseclab_tools

blasting_dictionary

爆破字典

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobaltstrike

CobaltStrike's source code

csbruter

Cobalt Strike team server password brute force tool

cve-2018-8120

CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7

cve-2019-2618

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

dbscanner

自动扫描内网常见sql、no-sql数据库(mysql、mssql、oracle、postgresql、redis、mongodb、memcached、elasticsearch)未授权访问及常规弱口令检测

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

dork-admin

盘点近年来的数据泄露、供应链污染事件

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

f-scrack

fakeimageexploiter

Use a Fake image.jpg (hide known file extensions) to exploit targets

fast-rdp-brute-gui-v2.0-by_stas-m--official

Fast-RDP-Brute(frdpb)官方版，及获取来源

gitbook

Markdown Gitbook

gitmad

Monitor, Alert, and Discover sensitive info and data leakage on Github.

gtfobins.github.io

Curated list of Unix binaries that can be exploited to bypass system security restrictions

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

how-does-xmanager-encrypt-password

This is a repo to tell you how Xmanager encrypt password.

ivre

Network recon framework.

kibana-rce

kibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合