uunoob Goto Github PK

-iis-backdoor

1135-cobaltstrike-toolkit

about CobaltStrike

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

andrewspecial

AndrewSpecial, dumping lsass' memory stealthily and bypassing "Cilence" since 2019.

apache-rootkit

A malicious Apache module with rootkit functionality

arbitrary-php-extension

这是一个实验性的PHP扩展，加载这个扩展后，每次请求将可以执行一段自己的PHP代码。

awd-predator-framework

AWD攻防赛webshell批量利用框架

awesome-browser-exploit

awesome list of browser exploitation tutorials

awesome-red-teaming

List of Awesome Red Teaming Resources

bestshell

世界上最好用的php大马

bluelotus_xssreceiver

XSS平台 CTF工具 Web安全工具

browser-pwn

An updated collection of resources targeting browser-exploitation.

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

chunked-coding-converter

Burp suite 分块传输辅助插件

client

远控控制端

cobalt_strike_wiki

Cobalt Strike系列

codeql-uboot

commodity-injection-signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

cryptofucker

A xposed plugin for intercepting crypto parameters from apk files.

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

ctfdefense

Some tools for CTF off line

cve-2019-0708-exploit

Using CVE-2019-0708 to Locally Promote Privileges in Windows 10 System

cve_2019_0708_bluekeep_rce

bluekeep exploit

dumpert

LSASS memory dumper using direct system calls and API unhooking.

echidna

Ethereum smart contract fuzzer

equationexploit

Eternalblue Doublepulsar exploit

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

fake_sqli_bypass

Fake框架的自动化Fuzz WAF/IDS 功能

fastjson-jdbcrowsetimpl-rce

JNDI加载RMIServer，对FastJson的反序列化攻击，附漏洞环境 & 利用Exp。护网杯CTF比赛原型题目“easy_web”。

fastjson_rce_tool

fastjson命令执行利用工具， remote code execute，JNDI服务利用工具 RMI/LDAP