pang0lin Goto Github PK

auto-unsearalize

自动化发现反序列化利用链

awesome_shiro

CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本

berserker

A list of useful payloads for Web Application Security and Pentest/CTF

blasting_dictionary

爆破字典

codeqlpy

cveproject

CVE request

dict

记录一下可能用到的字典

exponent-cms

Content Management, Simple.

impacket

Impacket is a collection of Python classes for working with network protocols.

jndiexploit

A malicious LDAP server for JNDI injection attacks

mysqlhoneypot

Use MySQL honeypot to get wechat ID

packer-fuzzer

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

phuip-fpizdam

py_alive

内网存活性探测的小工具

qltest

red_team_tool_countermeasures

routersploit

Exploitation Framework for Embedded Devices

rw_password

此项目用来提取收集以往泄露的密码中符合条件的强弱密码

tentacle

Tentacle is a POC vulnerability verification and exploit framework. It supports free extension of exploits and uses POC scripts. It supports calls to zoomeye, fofa, shodan and other APIs to perform bulk vulnerability verification for multiple targets.

tools

GitHub repository for sysadmin related tools

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

webraybtl

Webraybtl测试项目

webshell

Webshell && Backdoor Collection

xss

test