deidarayu Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

agentinjecttool

改造BeichenDream/InjectJDBC加入shiro获取key和修改key功能

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

bms

school project

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

burpsuitepro-2.1

什么? 你想用免费的BurpSuitePro版本!!!

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

caesar

一个全新的敏感文件发现工具

cobaltstrike

CobaltStrike's source code

cobra

Source Code Security Audit (源代码安全审计)

codeql

《深入理解CodeQL》Finding vulnerabilities with CodeQL.

collection-document

Collection of quality safety articles. Awesome articles.

conference

cve-2017-11882

Proof-of-Concept exploits for CVE-2017-11882

cve-2020

2020一些漏洞

cve-2020-35728

CVE-2020-35728 & Jackson-databind RCE

disk

blackmail

dnslog

DNSLog 是一款监控 DNS 解析记录和 HTTP 访问记录的工具。

ffmpeg-avi-m3u-xbin

geacon_pro

重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.

githack

A `.git` folder disclosure exploit

gophish

Open-Source Phishing Toolkit

hackbrowserdatamanual

Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring

havoc

The Havoc Framework.

huntr

Vulnerability Database | huntr.dev

java-sec-code

Java Web Common Vulnerabilities and Security Code.

kautilya

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

linenum

Scripted Local Linux Enumeration & Privilege Escalation Checks

logwindows

logger