qmf0c3uk Goto Github PK

jndiexploit-1

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jsphorse

结合反射调用、Javac动态编译、ScriptEngine调用JS技术和各种代码混淆技巧的一款免杀JSP Webshell生成工具，已支持蚁剑免杀

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

landraydes

蓝凌OA的前后台密码的加解密工具

log4j-scanner

Burp extension to scan Log4Shell (CVE-2021-44228) vulnerability pre and post auth.

log4j2-rce-scanner

BurpSuite Extension: Log4j2 RCE Scanner

log4j2passive

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-1

Log4j2 RCE Passive Scanner plugin for BurpSuite

lstar

LSTAR - CobaltStrike 综合后渗透插件

luwu

红队基础设施自动化部署工具

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide

malleable-c2-profiles

Cobalt Strike - Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike https://www.cobaltstrike.com/.

malleable-c2-profiles-1

Malleable C2 Profiles. A collection of profiles used in different projects using Cobalt Strike & Empire.

mars

Mars(战神)——资产发现、子域名枚举、C段扫描、资产变更监测、端口变更监测、域名解析变更监测、Awvs扫描、POC检测、web指纹探测、端口指纹探测、CDN探测、操作系统指纹探测、泛解析探测、WAF探测、敏感信息检测等等

micro8

moneyprinterv2

Automate the process of making money online.

myfocus-js

Automatically exported from code.google.com/p/myfocus-js

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

oa-seeyou

note

oneforall

OneForAll是一款功能强大的子域收集工具

password_brute_dictionary

口令爆破字典，有键盘组合字典、拼音字典、字母与数字混合这三种类型

poc

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

printnightmare

project.ctf.awd.1910.py

proxy_pool

Python爬虫代理IP池(proxy pool)

proxypool-1

一款用于自动切换ip的代理池服务,无需任何依赖，能快速运行。

pyonegui

绿色便携，插件自由，即改即用，几乎可以完美表现Python的能力

pyshell

python 版本的反弹shell

qmf0c3uk.github.io