smitnald Goto Github PK

invoke-obfuscation

PowerShell Obfuscator

invoker

Penetration testing utility.

ipproxytool

python ip proxy tool scrapy crawl. 抓取大量免费代理 ip，提取有效 ip 使用

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jsencrypter

一个用于前端加密Fuzz的Burp Suite插件

jshell

JShell - Get a JavaScript shell with XSS.

jsp

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

kitt-lite

Python-Based Pentesting CLI Tool

langnetworktopologys

端口扫描，指纹识别，网站探测，结果整理

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linco2

模拟Cobalt Strike的Beacon与C2通信过程，实现了基于HTTP协议的Linux C2

linux-netspeed

将Linux现常用的网络加速集成在一起

luwu

红队基础设施自动化部署工具

maltrail

Malicious traffic detection system

masscan-web-ui

MASSCAN Web UI

massmail

meltdown

Meltdown PoC for reading passwords from Google Chrome.

metasploit-omnibus

Packaging metasploit-framework with omnibus

mimipenguin

A tool to dump the login password from the current linux user

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

morphhta

morphHTA - Morphing Cobalt Strike's evil.HTA

myjsrat

This is JSRat.ps1 in Python

networksecurityself-study

这是作者的系列网络安全自学教程，主要是关于网安工具和实践操作的在线笔记，希望对大家有所帮助，学无止境，加油。

ngx_lua_waf

ngx_lua_waf是一个基于lua-nginx-module(openresty)的web应用防火墙

ninja

Open source C2 server created for stealth red team operations

nishang

Nishang - PowerShell for penetration testing and offensive security.https://github.com/samratashok/nishang/blob/master/Gather/Invoke-SSIDExfil.ps1

ntdllunpatcher

Example code for EDR bypassing

oa-tongda-rce

Office Anywhere网络智能办公系统