- 🔭 I'm concentrating on port fingerprinting.
- 🌱 I’m currently learning front-end knowledge Vue2 and Vue3.
- 📫 My Blog: https://medasz.github.io
- 😄 I enjoy developing security tools including asset detection, vulnerability scanning, etc.
Type: User
Company: Shanghai
Bio: 三年打鱼,两年晒网
Location: Shanghai
Tool for port forwarding & intranet proxy
Library for creating interactive cli applications.
A complete and graceful API for Wechat. 微信个人号接口、微信机器人及命令行微信,三十行即可自定义个人号机器人。
一份对Golang和Python友好的VIM配置
Network recon framework.
A Java GUI Tool for Analyzing Jar
一款用于JNDI注入利用的工具,大量参考/引用了Rogue JNDI项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。
JShell - Get a JavaScript shell with XSS.
JXWAF(锦衣盾)是一款开源web应用防火墙
jxwaf-mini server
Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.
Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。支持协议1200+,协议指纹10000+,应用指纹2000+,暴力破解协议10余种。
kunpeng是一个Golang编写的开源POC框架/库,以动态链接库的形式提供各种语言调用,通过此项目可快速开发漏洞检测类的系统。
LadonGO 4.0 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透,使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost,远程执行SSH/Winrm,密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis,端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机,端口扫描服务识别PortScan。
自主开发的分布式web漏洞扫描框架,集合webkit爬虫,Subdomain子域名发现,sqli、反射xss、Domxss等owasp top10漏洞扫描和边界资产发现能力。同时为通用CMS POC扫描提供了插件扩展平台
SRC子域名资产监控
采用自身模块规范编写的前端 UI 框架,遵循原生 HTML/CSS/JS 的书写形式,极低门槛,拿来即用。
My LCX, PortMaper. used in Windows,Linux,Android,Mac
在线漏洞扫描
Study Notes For Web Hacking / Web安全学习笔记
一个HIDS agent端的demo
C library for the MaxMind DB file format
Reverse Tunneling made easy for pentesters, by pentesters https://sysdream.com/
一款甲方资产巡航扫描系统。系统定位是发现资产,进行端口爆破。帮助企业更快发现弱口令问题。主要功能包括: 资产探测、端口爆破、定时任务、管理后台识别、报表展示
linux-kernel-exploits Linux平台提权漏洞集合
linux信息收集/应急响应/常见后门/挖矿检测/webshell检测脚本
🔐 Lockdoor Framework : A Penetration Testing framework with Cyber Security Resources
a fast, minimalist web framework for lua based on OpenResty
LSTAR - CobaltStrike 综合后渗透插件
基于openresty的共享字典的IP地址定位模块
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.