slowmistio Goto Github PK

c3

Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

can-my-iphone-crash

A iOS 12 and 11 webkit exploit

canalyzat0r

Security analysis toolkit for proprietary car protocols

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cazador_unr

Simple Hacking tools for windows

cef

Proof-of-concept CORS exploitation tool.

cerberus

一款功能强大的漏洞扫描器，子域名爆破使用aioDNS，asyncio异步快速扫描，覆盖目标全方位资产进行批量漏洞扫描，中间件信息收集，自动收集ip代理，探测Waf信息时自动使用来保护本机真实Ip，在本机Ip被Waf杀死后，自动切换代理Ip进行扫描，Waf信息收集(国内外100+款waf信息)包括安全狗，云锁，阿里云，云盾，腾讯云等，提供部分已知waf bypass 方案，中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等)，支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

certasset

Takes ip range, Scan all open SSL Certs, Grab Cnames

chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

chain-reactor

Chain Reactor is an open source framework for composing executables that simulate adversary behaviors and techniques on Linux endpoints.

chankro

Herramienta para evadir disable_functions y open_basedir

check_icmp_dos

iOS 12 / OS X Remote Kernel Heap Overflow (CVE-2018-4407) POC

chinese-translation-att-ck-framework

ATT&CK 框架图中文翻译版 原为安恒奖品，自我二次翻译，修改了一些小的翻译错误问题，自我保存即可

chipsec

Platform Security Assessment Framework

chrome-0day

chunked-coding-converter

Burp suite 分块传输辅助插件

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

ciscorv320dump

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

clair

Vulnerability Static Analysis for Containers

class-dump

class-dump命令行工具，用于导出Mach-O头文件

cloud-katana

Unlocking Serverless Computing to Assess Security Controls

cloud-sniper

Cloud Security Operations Orchestrator

cloudbunny

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

cloudkill3r-bypasses-cloudflare

CLOUDKiLL3R bypasses Cloudflare protection service via TOR Browser !

cloudsecurity

Cloud security projects with Spring Cloud Config Server and Vault

cmsprint

CMS和中间件指纹库

cmssc4n

Tool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop

cmsscanner

CMS Scanner Framework

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

cobaltstrike-ms17-010

cobaltstrike ms17-010 module and some other