rabbitsafe Goto Github PK

ieyes

icp备案查询

inscan

边界打点后的自动化渗透工具

jadx

Dex to Java decompiler

java-sourcecode-blogs

Java源码分析 【源码笔记】专注于Java后端系列框架的源码分析，每周持续推出Java后端系列框架的源码分析文章。

javafx_tools

java图形化漏洞利用工具集

jndi-injection-exploit-plus

50+ Gadgets(17 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

jndiexploit

一款用于JNDI注入利用的工具，大量参考/引用了Rogue JNDI项目的代码，支持直接植入内存shell，并集成了常见的bypass 高版本JDK的方式，适用于与自动化工具配合使用。

jndiexploit-1

A malicious LDAP server for JNDI injection attacks

jndiexploit-2

对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改

js-forward

前端参数加密渗透测试通用解决方案

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsrpc

jsrpc,在浏览器开启一个ws和服务连接，以请求http接口的形式来和浏览器通信 ,浏览器端收到调用通信执行原先设置好的js代码并获得返回值。

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

knife

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

kxahz

ladongo

Ladon Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

learn-web-hacking

Study Notes For Web Hacking / Web安全学习笔记

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URL with multithreading

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

log4j2-cve-2021-44228

Remote Code Injection In Log4j

log4j2burpscanner

CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4j2scan-1

用于帮助企业内部快速扫描log4j2的jndi漏洞的burp插件

log4jattacksurface

log4jscanner

log4shell-vulnerable-app

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

logmap

Log4j2 jndi injection fuzz tool

lstar

LSTAR - CobaltStrike 综合后渗透插件

malleable-c2

Cobalt Strike Malleable C2 Design and Reference Guide