qmf0c3uk Goto Github PK

-fixed-investment-transaction

20180205_go_sobad

360safebrowsergetpass

这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。

alioth

开源远程漏洞检测框架

apache-log4j-learning

Apache-Log4j漏洞复现笔记

apache-log4j-poc

Apache Log4j 远程代码执行

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

attack-defense-framework

:triangular_flag_on_post: A framework for CTF Attack with Defense Mode

attackdetection

Attack Detection

awd

awd比赛用到的脚本

bcelcodeman

BCEL encode/decode manager for fastjson payloads

blasting_dictionary

爆破字典

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

burploaderkeygen

Burp Suite Pro Loader & Keygen ( BurpSuite version v2020.1 - ∞ )

bypassav

免杀shellcode加载器

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with penetration tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

cknife

Cknife

cobaltstrike_4.3_source

Cobaltstrike4.3源码

command2api

Command2API - 万物皆可API

coremailuploadrce

Coremail任意文件上传漏洞POC

cs_mock

模拟cobalt strike beacon上线包. Simulation cobalt strike beacon connection packet.

ctf

保存有关自己做的 CTF 题目

ctfcracktools

China's first CTFTools framework.**国内首个CTF工具框架,旨在帮助CTFer快速攻克难关

ctfd

CTFs as you need them

cve-2018-2628

Oracle Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization Remote Command Execution Vulnerability (CVE-2018-2628)

cve-2019-0232

Apache Tomcat Remote Code Execution on Windows

cve-2019-2618

Weblogic Upload Vuln(Need username password)-CVE-2019-2618

cve-2020

2020一些漏洞

cve-2020-14882

cve-2020-17518