whatsthevuln Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.

100-gdb-tips

A collection of gdb tips. 100 maybe just mean many here.

abseil-cpp

Abseil Common Libraries (C++)

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

amass

In-depth Attack Surface Mapping and Asset Discovery

amis

前端低代码框架，通过 JSON 配置就能生成各种页面。

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

captfencoder

Captfencoder is a rapid cross platform network security tool suite, providing network security related code conversion, classical cryptography, cryptography, asymmetric encryption, miscellaneous tools, and aggregating all kinds of online tools.

cheat-engine

Cheat Engine. A development environment focused on modding

color

Color package for Go (golang)

creds

Some usefull Scripts and Executables for Pentest & Forensics

ctf-all-in-one

CTF竞赛权威指南

ctf_xinetd

A docker repository for deploying pwnable challenges in CTF

cve

Gather and update all available and newest CVEs with their PoC.

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

docker-misp

A (nearly) production ready Dockered MISP

doublestar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own techniques

enscan

基于各大API的一款企业信息查询工具，为了更快速的获取企业的信息，省去收集的麻烦过程，web端于plat平台上线

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

gmssl

支持国密SM2/SM3/SM4/SM9/SSL的密码工具箱

go-colorable

go-tun2socks

A tun2socks implementation written in Go.

hyperscan

High-performance regular expression matching library

impacket

Impacket is a collection of Python classes for working with network protocols.

knownsec-shellcodeloader

shellcodeloader

learnjavabug

Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。

llvm-project

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

myexploit

OAExploit一款基于产品的一键扫描工具。

nim

Nim is a statically typed compiled systems programming language. It combines successful concepts from mature languages like Python, Ada and Modula. Its design focuses on efficiency, expressiveness, and elegance (in that order of priority).