yangshuangfu Goto Github PK

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

bypassbehinder

ByPassBehinder / 冰蝎WebShell免杀生成 / Code By:Tas9er

bypasswaf

关于安全狗和云锁的自动化绕过脚本

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

certify

Active Directory certificate abuse.

checksubdomains

子域名收集工具，在 subDomainsBrute 和 Sublist3r 上二次开发，整合 subDomainsBrute 和 Sublist3r 进行扫描，并添加了批量检测的功能，源项目（https://github.com/lijiejie/subDomainsBrute）

chunked-coding-converter

Burp suite 分块传输辅助插件

ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

cobalt_strike_wiki

Cobalt Strike系列

cobaltstrikesource

Cobaltstrike4.1 Source

corstest

A simple CORS misconfiguration scanner

cs-sms-send

ctf-challenges

ctfd

CTFs as you need them

cve-2018-7600-drupal-rce

CVE-2018-7600 Drupal RCE

cve-2018-8581

CVE-2018-8581 | Microsoft Exchange Server Elevation of Privilege Vulnerability

cve-2019-11580

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE

cve-2020-16898_check

Minor powershell script that checks for vulnerable interfaces.

cve-2020-16947

PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)

dbj

大宝剑-信息收集和资产梳理工具（红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配）

ddoor

DDoor - cross platform backdoor using dns txt records

decryptautologon

Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon

dnsautorebinding

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

domaintools

内网域渗透小工具

domainweakpasswdcheck

内网安全·域账号弱口令审计

easyphpwaf

An Easy PHP WAF For CTF Game

epusdt

开源优雅的跨平台usdt收付中间件 Easy Payment USDT——epsdt

eternity

The Eternity Engine

f-nascan

Scanning a network asset information script

fake-flash.cn

www.flash.cn 的钓鱼页，中文+英文