toygang Goto Github PK

java-deserialization-exploits

A collection of curated Java Deserialization Exploits

javaweb-codereview

javaweb-codereview

jenkins

Jenkins漏洞探测、用户抓取爆破

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

jsshell

An interactive multi-user web JS shell

juicy-potato

A sugared version of RottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

k8cscan

Cscan 5.0 & Cobalt Strike 大型内网渗透自定义插件化扫描器（附C#/VC/Delphi/Python插件Demo源码) 程序采用多线程批量扫描大型内网多个IP段C段主机，目前插件包含: C段旁注扫描、子域名扫描、Ftp密码爆破、Mysql密码爆、系统密码爆破、存活主机扫描、端口扫描、Web信息探测、操作系统版本探测、Cisco思科设备扫描等,支持调用任意外部程序或脚本

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

katanaframework

The New Hacking Framework

keyfinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。

labs

Vulnerability Labs for security analysis

langsrccurise

SRC子域名资产监控

lazagne

Credentials recovery project

linkfinder

A python script that finds endpoints in JavaScript files

machinae

Machinae Security Intelligence Collector

machine-learning-for-cyber-security

Machine Learning for Cyber Security

machine-learning-with-python

Python code for common Machine Learning Algorithms

machine_learning_security

Source code about machine learning and security.

malware

Course materials for Malware Analysis by RPISEC

masnmapscan-v1.0

整合了masscan和nmap两款扫描器，masscan扫描端口，nmap扫描端口对应服务，二者结合起来实现了又快又好地扫描。并且加入了防火墙的功能

massh-enum

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

micro8

mind-map

各种安全相关思维导图整理收集

mm-wiki

MM-Wiki 一个轻量级的企业知识分享与团队协同软件，可用于快速构建企业 Wiki 和团队知识分享平台。部署方便，使用简单，帮助团队构建一个信息共享、文档管理的协作环境。

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.