wu860 Goto Github PK

acefile

POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

androrat-1

androrat

awesome-awesomeness

A curated list of awesome awesomeness

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

behinder

“冰蝎”动态二进制加密网站管理客户端

browspy

浏览器用户全部信息收集js

bypass_waf

waf自动爆破(绕过)工具

captchacker

Automatically exported from code.google.com/p/captchacker

commix

Automated All-in-One OS Command Injection and Exploitation Tool

cookiehacker

Chrome extension, very easy to use. Cookies from: JavaScript document.cookie/Wireshark Cookies etc.

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

ctf-tools

Some setup scripts for security research tools.

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

depdep

Depdep is a merciless sentinel which will seek sensitive files containing critical info leaking through your network

facebook-spider

crawl facebook article spider using go language

fener

fener

flexidie

Source code and binaries of FlexiSpy from the Flexidie dump

goagent

https://code.google.com/p/goagent/issues/list

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/Exploit/APT/0day/Shellcode/Payload/priviledge/OverFlow/WebShell/PenTest)

kacak

Tools for penetration testers that can enumerate which users logged on windows systems

lanmitm

Android中间人攻击测试工具

levye

levye is a brute force tool which is support sshkey, vnckey, rdp, openvpn.

micro8

openfros

pentest

tools

php-webshells

Common php webshells. Do not host the file(s) on your server!

pic