nothingcw Goto Github PK

iprotate_burp_extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

java

27天成为Java大神

javasecinterview

打造最强的Java安全研究与安全开发面试题库，包含问题和详细的答案，帮助师傅们找到满意的工作

jgraphx

jgraphx 4.0.4 build for cs project

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsforward

解决web及移动端H5数据加密Burp调试问题

k8cscan

大型内网渗透自定义插件化扫描器（附C#/VC/Delphi/Python插件Demo源码) 程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆、系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本

kali-windows

Kali Windows

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

kernelbypasssharp

C# Kernel Mode Driver to read and write memory in protected processes

kiterunner

Contextual Content Discovery Tool

ksubdomain

无状态子域名爆破工具

lazagne

Credentials recovery project

ldap_shell

AD ACL abuse

learn-security-from-0

从0开始学安全，注重实战+技巧的运用，分享各种安全攻防干货，包括但不限于：Web安全、代码审计 、内网渗透、企业安全等。

learning_summary

对于安全学习的一些总结，更新ing，期待 Fork & Star！

learnjavabug

Java安全相关的漏洞和技术demo，其中包括原生Java、Fastjson、Jackson、Hessian2以及XML反序列化漏洞利用和Dubbo（Hessian2反序列化）、Shiro（PaddingOracleCBC）等框架的exploits，并且还有Java Security Manager绕过、Dubbo-Hessian2安全加固、RMI利用等等实践代码。

linkfinder

A python script that finds endpoints in JavaScript files

linux-exploit-suggester

Linux privilege escalation auditing tool

lm_tools

横向移动三剑客 ( Lateral movement tools)

lsassy

Extract credentials from lsass remotely

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

masnmapscan-v1.0

一款端口扫描器。整合了masscan和nmap两款扫描器，masscan扫描端口，nmap扫描端口对应服务，二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能

memshell

a webshell resides in the memory of java web server

metasploit

mhyprot2drvcontrol

A lib that allows using mhyprot2 driver for enum process modules, r/w process memory and kill process.

mirrordump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

movekit

Cobalt Strike kit for Lateral Movement

mremoteng

mRemoteNG is the next generation of mRemote, open source, tabbed, multi-protocol, remote connections manager.