xingyangit Goto Github PK

adduser-bof

Cobalt Strike BOF that Add an admin user

afrog

A Vulnerability Scanning Tools For Penetration Testing

akawaka

一个简单的文件内容搜索工具

aniya

免杀框架

apk2url

A tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling

arjun

HTTP parameter discovery suite.

bbot

OSINT automation for hackers.

behinder

“冰蝎”动态二进制加密网站管理客户端

blueteamtools

蓝队分析研判工具箱，自带的反编译工具对红队也有帮助，有建议欢迎给我留言

bypassadduser

绕过杀软添加用户

bypassbehinder

ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er

colordataproxyuacbypass

Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC bypass. Win 7 & up.

cve-2024-26229-exploit

Windows LPE

ddddocr

带带弟弟 通用验证码识别OCR pypi版

deskbypass

dirsearch_bypass403

目录扫描+JS文件中提取URL和子域+403状态绕过+指纹识别

ehole

EHole(棱洞)3.0 重构版-红队重点攻击系统指纹探测工具

enscan_go

一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

erfrp

Erfrp-frp二开-免杀与隐藏

example.java.helloworld

"Hello World" Example for Java

fastapi-shop-app

a micro ecommerce shop for all kind of products, orders , deliveries and more.......

fastjson

Fastjson姿势技巧集合

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

gofilebinder

golang免杀捆绑器

hrsword

火绒剑独立版

jndi-injection-exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

jndiexploit

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

ldrlibraryex

A small x64 library to load dll's into memory.

leakinfo_finder

批量爬取JS文件中接口信息，添加spring boot actuator目录扫描以及手机号、身份证号码等敏感信息匹配

mscan

一款域渗透扫描工具，方便一键自动化、全方位的信息收集及扫描域提权漏洞。