d-rn Goto Github PK

dubbo-exp

Dubbo反序列化一键快速攻击测试工具，支持dubbo协议和http协议，支持hessian反序列化和java原生反序列化。

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具

gadgets

Java反序列化漏洞利用链补全计划，仅用于个人归纳总结。

gitlab-cve-2021-22205

hivenightmare

Exploit allowing you to read registry hives as non-admin on Windows 10 and 11

imgformd

图床

impacket

Impacket is a collection of Python classes for working with network protocols.

installerfiletakeover

java

关于学习java安全的一些知识,正在学习中ing,欢迎fork and star

kingofbugbountytips

learngolang

《Golang安全资源大全-只有Go语言才能改变世界》Only Golang Can Change The World.

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

log4j-payload-generator

Log4j jndi injects the Payload generator

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4shell

Operational information regarding the vulnerability in the Log4j logging library.

log4shell-tester

lscript

全能无线渗透测试工具The LAZY script will make your life easier, and of course faster.

meppo

漏洞检测框架 Meppo | By WingsSec

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

mixmusicapi

https://jsososo.github.io/MixMusicApi

my-re0-k8s-security

:atom: [WIP] 整理整理过去的分享，从零开始的Kubernetes攻防 ...

n_m3u8dl-cli

[.NET] m3u8 downloader 开源的命令行m3u8/HLS下载器，支持普通AES-128-CBC解密，多线程，自定义请求头等. 支持简体中文,繁体中文和英文.

oneforall

OneForAll是一款功能强大的子域收集工具

openwechat

golang微信SDK

passive-scan-client

Burp被动扫描流量转发插件

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes

《内网安全攻防-渗透测试实战指南》一些技术点概括

pkgdoc

go 标准库和部分第三方包的包文档中文翻译

poc15.0.1

This is the POC from Saar Amar putted in a Xcode project so people can test!