awsassets Goto Github PK

toggle_token_privileges_bof

Syscall BOF to arbitrarily add/detract process token privilege rights.

token-core

Next generation core inside imToken Wallet.

token-priv

Token Privilege Research

tokenprivilege_demo

Impersonation Privileges

tokenprivilegeassigner

tokenstomp

C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic

tokenvator

A tool to elevate privilege with Windows Tokens

tokio-socks

Asynchronous SOCKS proxy support for Rust.

tomcat

Docker Official Image packaging for Apache Tomcat

tomcat-ajp-exp

Java version of Tomcat-AJP-EXP, for practice

tomcat-backdoor

tomcat-backdoor tomcat隐蔽后门-内存马

tomcat-cluster-session-sync-exp

tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是session集群同步的洞！

tomcat-jmxproxy-rce-exp

Apache Tomcat JMXProxy RCE

tomcat-webshell-application

A webshell application and interactive shell for pentesting Apache Tomcat servers.

tomcat2cs

Tomcat Jar包后门

tomcat_nofile_webshell

Tomcat基于动态注册Filter的无文件Webshell

tomcatmemshell

拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马

toml

TOML parser for Golang with reflection.

tongasdp-test

TongASDP漏洞测试环境

tongda-exp

python编写的多个通达常见漏洞exp

tongda-exp-poc

通达OA RCE

tongda-oa

通达OA一些漏洞点

tongda_oa_rce

通达oa 越权登录+文件上传getshell

tongdaoa

TongdaOA v11.7 任意用户登录

tongdaoa-fake-user

通达OA 任意用户登录漏洞

tonic

A native gRPC client & server implementation with async/await support.

tool

瞎写的一点小脚本小工具什么的

tools

Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.

tools-1

Codelabs management & hosting tools

tools-gophish

gophish批量操作，适用于大批量钓鱼演练