ur10ser Goto Github PK

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cachet

📛 An open source status page system for everyone.

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

ctf-tools

Some setup scripts for security research tools.

cve-2021-30551

my exp for chrome V8 CVE-2021-30551

cve-2021-4034

PoC for CVE-2021-4034

dingtalk-rce

faketoa

Fake IP sources using Linux's BPF feature

gobypass

Golang免杀生成工具，参考网上已有的免杀方式实现的半自动免杀马生成工具，需要本地安装Golang环境，支持多种参数与方式生成

hack-fastjson-1.2.80

hack_tools_for_me

自己为了方便收集的小工具

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

ios

jndiexploit-1

一款用于 JNDI注入 利用的工具，大量参考/引用了 Rogue JNDI 项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。（from https://github.com/feihong-cs/JNDIExploit）

local-user-privilege-escalation-exp

There is some EXP maybe help a local user or malicious program obtain system privileges on the targeted machine.

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

paddle

PArallel Distributed Deep LEarning: Machine Learning Framework from Industrial Practice （『飞桨』核心框架，深度学习&机器学习高性能单机、分布式训练和跨平台部署）

penetration_testing_case

用于记录分享一些有趣的案例

pentest_study

从零开始内网渗透学习

php_filter_chain_generator

printnightmare

prvd

PHP Runtime Vulnerability Detection

reduh

Create a TCP circuit through validly formed HTTP requests

sec-jobs

信息安全实习和校招的面经、真题和资料 减少安全选手找实习/工作的痛苦

security-ppt

大安全各领域各公司各会议分享的PPT

sharpchromium

.NET 4.0 CLR Project to retrieve Chromium data, such as cookies, history and saved logins.

shiro_rce_exp

Shiro RCE (Padding Oracle Attack)

tarsweb

TARS Projects Dashboard

test