qlng Goto Github PK

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

pentest-tools

Custom pentesting tools

poc

收集整理漏洞EXp/POC,大部分漏洞来源网络，目前收集整理了700多个poc/exp，长期更新。

poclist

Alibaba-Nacos-Unauthorized/ApacheDruid-RCE_CVE-2021-25646/MS-Exchange-SSRF-CVE-2021-26885/Oracle-WebLogic-CVE-2021-2109_RCE/RG-CNVD-2021-14536/RJ-SSL-VPN-UltraVires/Redis-Unauthorized-RCE/TDOA-V11.7-GetOnlineCookie/VMware-vCenter-GetAnyFile/yongyou-GRP-U8-XXE/Oracle-WebLogic-CVE-2020-14883/Oracle-WebLogic-CVE-2020-14882/Apache-Solr-GetAnyFile/F5-BI

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

proxy-attackchain

Proxylogon & Proxyshell & Proxyoracle & Proxytoken & All exchange server history vulns summarization :)

proxyshell

A basic proxylogon scanner

proxyshell-poc

ptscripts

pysoxy

A small Socks5 Proxy Server in Python

python

最良心的 Python 教程：

qax_vpn_crack

奇安信VPN任意用户密码重置

qingscan

一个漏洞扫描器粘合剂；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

qlng

r8-cs1.6

very very old source code for cs 1.6, from CSX Community

rubeus

Trying to tame the three-headed dog.

searchavailableexe

寻找可利用的白文件

sendmail

批量发送钓鱼邮箱

serein

【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。

sharpshares

Enumerate all network shares in the current domain. Also, can resolve names to IP addresses.

sharpxdecrypt

Xshell全版本密码解密工具

shell-analyzer

Java内存马查杀GUI工具，实时动态分析，支持本地和远程查杀

shellcodecompiler

Shellcode Compiler

shellcodeframework

绕3环的shellcode免杀框架

shellcodeloader

This is my FirstRepository

shiro-550-with-nocc

奇安信北京攻防团队： Shiro-550 不依赖CC链利用工具

shiroattack2

shiro反序列化漏洞综合利用,包含（回显执行命令/注入内存马）修复原版中NoCC的问题 https://github.com/j1anFen/shiro_attack

shuize_0x727

信息收集自动化工具

silenttrinity

An asynchronous, collaborative post-exploitation agent powered by Python and .NET's DLR