lbcnp Goto Github PK

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsp-webshells

Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

lazagne

Credentials recovery project

linkfinder

A python script that finds endpoints in JavaScript files

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

memory-dump

middleware-vulnerability-detection

CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15

ms17-010

MS17-010

muggle-ocr

A backup of muggle-ocr pip package

mysql-magic

dump mysql client password from memory

natbypass

一款lcx在golang下的实现

oracleshell

oracle 数据库命令执行

penetration

渗透 超全面的渗透资料💯 包含：0day，xss，sql注入，提权……

pierced

钉钉内网穿透

printnightmare

python-100-days

Python - 100天从新手到大师

rdpwrap

RDP Wrapper Library

regeorg

The successor to reDuh, pwn a bastion webserver and create SOCKS proxies through the DMZ. Pivot and pwn.

revsuit

RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.

rogue-mysql-server

MySQL fake server for read files of connected clients

shadowsocks

backup of https://github.com/shadowsocks/shadowsocks

sharpwifigrabber

Sharp Wifi Password Grabber retrieves in clear-text the Wi-Fi Passwords from all WLAN Profiles saved on a workstation.

shellcodeloader

shellcodeloader

shiro-exploit

Shiro反序列化利用工具，支持key爆破，配合ysoserial，生成回显Payload

shiro_xray

CommonsBeanutils1,CommonsCollectionsK1

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 checklist

struts2_check

一个用于识别目标网站是否采用Struts2框架开发的工具demo