rebootorz Goto Github PK

1990yanjing.github.io

秘密基地

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

ajpfuzzer

A command-line fuzzer for the Apache JServ Protocol (ajp13)

app-env-docker

基于 Docker 的真实应用测试环境

arl

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

av-killer

Antivirus Killer

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

awesome-cloud-native-security

awesome resources about cloud native security 🐿

awesome-k8s-security

A curated list for Awesome Kubernetes Security resources

awvs13_batch_py3

针对 AWVS扫描器开发的批量扫描脚本，支持log4j漏洞专项，支持联动xray、burp、w13scan等被动批量

bad_http

Obtain and execute commands from the specified address regularly, and push the results through Dingding api.

bayonet

bayonet是一款src资产管理系统，从子域名、端口服务、漏洞、爬虫等一体化的资产管理系统

blog-stuff

burpshiropassivescan

一款基于BurpSuite的被动式shiro检测插件

bypass_disable_functions_shell

一个各种方式突破Disable_functions达到命令执行的shell

cdk

CDK is an open-sourced container penetration toolkit, offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs helps you to escape container and takeover K8s cluster easily.

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

cnvd-2020-10487-tomcat-ajp-lfi-scanner

CNVD-2020-10487/CVE-2020-1938,批量扫描工具

code6_addingrules

自己瞎写的，只是为了方便给Code6添加规则

cortana-scripts

A collection of Cortana scripts that you may use with Armitage and Cobalt Strike 2.x. Cortana Scripts are not compatible with Cobalt Strike 3.x. Cobalt Strike 3.x uses a variant of Cortana called Aggressor Script.

crossc2

generate CobaltStrike's cross-platform payload

cve-2020-0688

Exploit and detect tools for CVE-2020-0688

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cve-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527

cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

cve-2021-4034

CVE-2021-4034 1day

desertfox

Implement load Cobalt Strike & Metasploit shellcode with golang

dictionaryprocessing

字典整理

dotnettojscript

A tool to create a JScript file which loads a .NET v2 assembly from memory.

ehole

EHole(棱洞)-红队重点攻击系统指纹探测工具