gysf666 Goto Github PK

socksoverrdp

Socks5/4/4a Proxy support for Remote Desktop Protocol / Terminal Services / Citrix / XenApp / XenDesktop

spectre

A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.

spooltrigger

Weaponizing for privileged file writes bugs with windows problem reporting

spp

简单强大的多协议双向代理工具 A simple and powerful proxy

spring

响应式TYPECHO主题

spring-boot-actuator-exploit

Spring Boot Actuator (jolokia) XXE/RCE

spring-boot-upload-file-lead-to-rce-tricks

spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧

spring-cloud-function-spel-rce

spring-cloud-function SpEL RCE, Vultarget & Poc

spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053

spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

springboot-scan-gui

springbootexploit

项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

springinspector

Java自动代码审计工具，尤其针对Spring框架，核心原理是模拟JVM栈帧进行分析，无需提供源码，通过一个JAR包即可

sql-injection-bypass

记录实战中的各种sql注入绕过姿势

src-script

挖掘src常用脚本

ssh-harvester

Harvest passwords automatically from OpenSSH server

ssh-inject

A ptrace POC by hooking SSH to reveal provided passwords

ssrf-vuls

国光的手把手带你用 SSRF 打穿内网靶场源码

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

standin

StandIn is a small .NET35/45 AD post-exploitation toolkit

starmap

一个轮子融合的子域名收集小工具

starship

☄🌌️ The minimal, blazing-fast, and infinitely customizable prompt for any shell!

stormspotter

Azure Red Team tool for graphing Azure and Azure Active Directory objects

stowaway

👻Stowaway -- Multi-hop Proxy Tool for pentesters

struts-scan

Python2编写的struts2漏洞全版本检测和利用工具

struts2vulstools

Struts2系列漏洞检查工具

studype

subdir-vul-find

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.