vf3ng Goto Github PK

hawkeye

GitHub 泄露监控系统

hdiv

Hdiv CE | Application Self-Protection

httpie

CLI HTTP client, user-friendly curl replacement with intuitive UI, JSON support, syntax highlighting, wget-like downloads, extensions, etc.

https_hijack_demo

HTTPS Frontend Hijack

httpscan

一个爬虫式的网段Web主机发现小工具 # A HTTP Service detector with a crawler from IP/CIDR

iis_exploit

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

ingraind

Data first monitoring agent using (e)BPF, built on RedBPF

inotify-tools

inotify-tools is a C library and a set of command-line programs for Linux providing a simple interface to inotify.

intranet_penetration_tips

2018年初整理的一些内网渗透TIPS，后面更新的慢，所以公开出来希望跟小伙伴们一起更新维护~

ip2region

准确率99.9%的ip地址定位库，0.0x毫秒级查询，数据库文件大小只有1.5M，提供了java,php,c,python,nodejs,golang查询绑定和Binary,B树,内存三种查询算法，妈妈再也不用担心我的ip地址定位！

iview-admin

Vue 2.0 admin management system template based on iView

j2eescan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.

jackson-databind

General data-binding package for Jackson (2.x): works on streaming API (core) implementation(s)

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-security-manager-bypass

java-unserialization-study

QAQ Just study unserialize vulnerabilities in Java :)

javaopenrasp

A Java Rasp Demo

javaunserializeexploits

jenkins-cli-exploit

Jenkins CommonCollections Exploit

jndi-exploit-bypass-demo

Demo code for post <Restrictions of JNDI Manipulation RCE & Bypass>

jsproxy

一个基于浏览器端 JS 实现的在线代理

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

kafka-python

Kafka protocol support in Python

kcon

KCon is a famous Hacker Con powered by Knownsec Team.

knowledge-base

Knowledge Base 慢雾安全团队知识库

kunpeng

kunpeng是一个Golang编写的开源POC检测框架，以动态链接库的形式提供各种语言调用，通过此项目可快速对目标进行安全漏洞检测，比攻击者快一步发现风险漏洞。

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

linuxstack

Linux技术栈

litmus_test

Detecting ATT&CK techniques & tactics for Linux

lua-ffi-libinjection

LuaJIT FFI bindings for libinjection