uyid Goto Github PK

active-directory-pentest-notes

个人域渗透学习笔记

aflsmart

Smart Greybox Fuzzing

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

awesomescript

AntSword Shell 脚本分享/示例

behinder_source

冰蝎的源码（Decompile & Fixed）

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

chunk-proxy

cnvd-c-2019-48814

WebLogic wls9-async反序列化远程命令执行漏洞

crawlergo

A powerful browser crawler for web vulnerability scanners

cve-2023-33246

dcsec

域控安全one for all

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

ew

内网穿透(跨平台)

forkplayground

An implementation and proof-of-concept of Process Forking.

frpproplugin

frp0.33修改版,过流量检测,免杀,支持加载远程配置文件可用于cs直接使用的插件

fscan

一款内网扫描工具，方便一键大保健~

gopoc

用cel-go重现了长亭xray的poc检测功能的轮子

hideshell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

hooksigntool

inline-execute-pe

Execute unmanaged Windows executables in CobaltStrike Beacons

inscan

边界打点后的自动化渗透工具

iprange

IPv4 address parser for the nmap format

java-object-searcher

java内存对象搜索辅助工具

jndi-injection-bypass

Some payloads of JNDI Injection in JDK 1.8.0_191+

jndiexploit

A malicious LDAP server for JNDI injection attacks

jolokia-exploitation-toolkit

jolokia-exploitation-toolkit

jre8u20_rce_gadget

JRE8u20_RCE_Gadget

jspencounter

kunpeng

kunpeng是一个Golang编写的开源POC框架/库，以动态链接库的形式提供各种语言调用，通过此项目可快速开发漏洞检测类的系统。