pyking Goto Github PK

sweetpotato

Local Service to SYSTEM privilege escalation from Windows 7 to Windows 10 / Server 2019

sweetpotato-1

SweetPotato修改版，用于webshell下执行命令 感谢@zcgonvh和@RcoIl两位师傅的耐心指导

sweetpotato_cs

修改的SweetPotato，使之可以用于CobaltStrike v4.0

sxf_atrust_sandbox_bypass

深信服零信任沙箱逃逸( 正常功能，所以我也不打算再提交CNVD, 给使用这款产品的用户介绍下功能效果）

systemtoken

Steal privileged token to obtain SYSTEM shell

taowu-cobalt-strike

tesseract

Tesseract Open Source OCR Engine (main repository)

the-backdoor-factory

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

thief

一款创新跨平台摸鱼神器，支持小说、股票、网页、视频、直播、PDF、游戏等摸鱼模式，为上班族打造的上班必备神器，使用此软件可以让上班倍感轻松，远离 ICU。

thinkphp-rce-poc-collection

thinkphp v5.x 远程代码执行漏洞-POC集合

thinkphp6_anyfile_operation_write

ThinkPHP6任意文件操作漏洞,影响版本ThinkPHP6.0.0-6.0.1

threadx

Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications.

tomcat-cluster-session-sync-exp

tomcat使用了自带session同步功能时，不安全的配置（没有使用EncryptInterceptor）导致存在的反序列化漏洞，通过精心构造的数据包， 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484，9484是session持久化的洞，这个是session集群同步的洞！

tongdaoa-fake-user

通达OA 任意用户登录漏洞

tool-for-ctf

Virtual machine configuration for CTF

toolanalysisresultsheet

Tool Analysis Result Sheet

tools

一些实用的python脚本

tools-1

tpscan

tscan

TScan 提供了CMS指纹识别、端口扫描、旁站信息、信息泄漏等功能，期许在最短的时间辅助安全人员在渗透前做好充分的信息搜集

tsunami-security-scanner

Tsunami is a general purpose network security scanner with an extensible plugin system for detecting high severity vulnerabilities with high confidence.

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

uac_bypass_in_the_wild

Windows 10 UAC bypass for all executable files which are autoelevate true .

uacme

Defeating Windows User Account Control

ueditor

rich text 富文本编辑器

upload-fuzz-dic-builder

上传漏洞fuzz字典生成脚本

utm

Virtual machines for iOS

v2ray-core

A platform for building proxies to bypass network restrictions.

venom

Venom - A Multi-hop Proxy for Penetration Testers

viper

Viper (炫彩蛇) 图形化内网渗透工具