uzju Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

2022-hw-poc

2022 护网行动 POC 整理

ast-app-docker-compose

Docker compose for AST APP（ IAST + SAST）

autoneteasemusic

网易云音乐自断刷歌升级和签到

awesome-cobaltstrike

cobaltstrike的相关资源汇总 / List of Awesome CobaltStrike Resources

awesome-github-repo

收集整理 GitHub 上高质量、有趣的开源项目。

awesome-hacker-search-engines

A list of search engines useful during Penetration testing, vulnerability assessments, red team operations, bug bounty and more

best_readme_template

🌩最好的中文README模板⚡️Best README template

biliexp

B站(bilibili 哔哩哔哩)助手:1.每日投币观看分享视频(快速升6级),签到(直播+漫画), 动态抽奖,风纪投票(免费得大会员),直播挂机(小心心),天选时刻(抽奖)等日常操作(云函数+Actions+docker)(多账户)。2.漫画视频番剧音乐下载器(CLI)。3.up主视频专栏音乐投稿的python实现

burp-ysoserial

YSOSERIAL Integration with burp suite

cdk_document

🌏 [WIP]整理好了之后迁移到 cdk-team/document，包含各类容器、K8s攻防场景的CDK文档。

chatgpt-next-web

A well-designed cross-platform ChatGPT UI (Web / PWA / Linux / Win / MacOS). 一键拥有你自己的跨平台 ChatGPT 应用。

cloud-bucket-leak-detection-tools

六大云存储，泄露利用检测工具

cloudkeykiller

阿里云AK泄露利用工具

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

container-escape-check

docker container escape check

createhiddenaccount

A tool for creating hidden accounts using the registry.

cve-2021-26084

CVE-2021-26084 Remote Code Execution on Confluence Servers

cve-2022-0847-dirtypipe-exploit

A root exploit for CVE-2022-0847

cve-2022-0995

CVE-2022-0995 exploit

cve-2022-21660

dictionary-of-pentesting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

dongtai-agent-java

Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynamic hooks.

dongtai-govwa

dongtai-go-agent 靶场

dongtai-plugin-idea

Dongtai-plugin-idea is an IDEA plug-in developed by DongTai team for Java Web application developers. This plug-in provides functions such as vulnerability detection and code audit during application development, enabling developers to find application vulnerabilities more intuitively, quickly and in real time during application development.

flash-linux0.11-talk

你管这破玩意叫操作系统源码 — 像小说一样品读 Linux 0.11 核心代码

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

fscan-poc

强化fscan的漏扫POC库

gatherinfo

渗透测试信息收集/内网渗透信息收集