secjia Goto Github PK

kcon2021code

kubepi

KubePi 是一款简单易用的开源 Kubernetes 可视化管理面板

lfimap

Local file inclusion discovery and exploitation tool

linuxcheck

Linux应急处置/信息搜集/漏洞检测工具，支持基础配置/网络流量/任务计划/环境变量/用户信息/Services/bash/恶意文件/内核Rootkit/SSH/Webshell/挖矿文件/挖矿进程/供应链/服务器风险等13类70+项检查

litespeedtest

A simple tool for batch test ss/ssr/v2ray/trojan servers.

llvm-ir-tutorial

LLVM IR入门指南

log4j-over-slf4f

versão da lib para compatibilidade com Filenet P8

lookupinterface

CodeQL 寻找 JNDI利用 Lookup接口

match-replace-burp

Useful Match and Replace BurpSuite Rules

memshell

Tomcat的Filter型免杀内存马，主要思路是Bypass各种检查手段

mysql-magic

dump mysql client password from memory

mysqlbypassforsafedog

MySQL注入绕安全狗Tamper / Code By:Tas9er

mysqlmonitor

MySQL实时监控工具（代码审计、黑盒测试辅助工具）

natpass

新一代NAT内网穿透+shell+vnc工具

pc_wxapkg_decrypt

windows pc端wxpkg文件解密（非解包）

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest-tools

Intranet penetration tools

persistencesniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines.

plugins

some tools plugins

prepare-for-awd

AWD攻防赛脚本集合

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

py_ibox

ibox捡漏工具，新版脚本不在开源，当前版本停止更新。

redis-rogue-getshell

redis 4.x/5.x master/slave getshell module

redteam_vul

红队作战中比较常遇到的一些重点系统漏洞整理。

rmiscout

RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities

scanner_docker

Scanner Docker

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

seeyon_exp

致远OA综合利用工具

seeyou_exp

致远OA漏洞综合利用脚本

shirodecrypter

一个解密 Shiro-rememberMe的图形化小工具，支持cbc和gcm。