aaaaaaa-ops Goto Github PK

acefile

POC of https://research.checkpoint.com/extracting-code-execution-from-winrar/

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

alicloud-tools

阿里云ECS、策略组辅助小工具

ascii-zip

A deflate compressor that emits compressed data that is in the [A-Za-z0-9] ASCII byte range.

awesome-incident-response

A curated list of tools for incident response

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

cas4.x-execution-rce

exp for 4.1.x-4.1.6, 4.1.7-4.2.x, padding oracle attack

ccupp

基于社会工程学的弱口令密码字典生成工具

cdqr

The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

codeql-jdk-docker

Unofficial Dockerfile and scripts for building CodeQL databases for the OpenJDK

copy2java

一键生成Java代码的burp插件/Generate Java script for fuzzing in Burp。

cve-2018-20250

exp for https://research.checkpoint.com/extracting-code-execution-from-winrar

dictorygenerator

A dictory generate tool implemented with python

discutils

Utility libraries to interact with discs, filesystem formats and more

dnscache

Volatility memory forensics plugin for extracting Windows DNS Cache

docker-pyinstaller

PyInstaller for Linux and Windows inside Docker

esxi-util

Python scripts to manage ESXi server

fingerprint

各种工具指纹收集分享

fragattacks

gadgetinspector

一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静态检测功能。并且加入了很多功能以方便进行漏洞自动化挖掘。

gadgetinspector-1

利用链、漏洞检测工具

gadgets

Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。

genpass

gosint

Gosint is a distributed asset information collection and vulnerability scanning platform

grouper2

Find vulnerabilities in AD Group Policy

hackbrowserdata

Decrypt passwords/cookies/history/bookmarks from the browser. 一款可全平台运行的浏览器数据导出解密工具。

holmes

Website FingerPrint Recognition

internal-monologue

Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS

java-security-manager-bypass