xxh396 Goto Github PK

bypassanti-virus

免杀姿势学习、记录、复现。

cnvd-2020-10487-tomcat-ajp-poc

CNVD-2020-10487(CVE-2020-1938), tomcat ajp 文件读取漏洞poc

exp-collect

exp_hub

漏洞复现与poc收集，CVE-2021-21975，cve-2021-22005，CVE-2021-26295，VMware vCenter任意文件读取

fuso

一款体积小, 快速, 稳定, 高效, 轻量的内网穿透, 端口转发工具 支持多连接,级联代理,传输加密 (A small volume, fast, stable, efficient, and lightweight intranet penetration, port forwarding tool supports multiple connections, cascading proxy, and transmission encryption)

githack3

A `.git` folder disclosure exploit; A script based on Crawler，used python3 and you can use it in windows

java-shellcode-loader

基于Java实现的Shellcode加载器

justc2file

Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)

pentest-note

渗透测试☞经验/思路/想法/总结/笔记

redteamtools

记录自己编写、修改的部分工具

sebrutegui

专注登入框暴力破解，selenium+chromedriver模拟浏览器点击登入，无视复杂的前端JS加密，弱口令多线程快速检测。

secexample

JAVA 漏洞靶场 (Vulnerability Environment For Java)

spring4shell_behinder

CVE-2022-22965写入冰蝎webshell脚本

supershell

Supershell C2 远控平台，基于反向SSH隧道获取完全交互式Shell

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vulnerability

此项目将不定期从棱角社区对外进行公布一些最新漏洞。

win-shellcode-rs

improved shellcode template for b1tg/rust-windows-shellcode

windowselevation

Windows Elevation(持续更新)

winx64-injectallprocessesmeterpreter-shellcode

64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.

xxh396

Config files for my GitHub profile.

yaegi

Yaegi is Another Elegant Go Interpreter