yearnming Goto Github PK
Type: User
Type: User
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
一个渗透测试/SRC挖掘中用于信息收集的脚本集合,面向安全从业者、学习人员,严禁用于非法用途。
一款用于 JNDI注入 利用的工具,大量参考/引用了 Rogue JNDI 项目的代码,支持直接植入内存shell,并集成了常见的bypass 高版本JDK的方式,适用于与自动化工具配合使用。(from https://github.com/feihong-cs/JNDIExploit)
无须借助dnslog且完全无害的JNDI反连检测工具,解析RMI和LDAP协议实现,可用于甲方内网自查
JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.
fastjson漏洞批量检测工具
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)
Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.
C# 读取本机对外RDP连接记录和其他主机对该主机的连接记录,从而在内网渗透中获取更多可通内网网段信息以及定位运维管理人员主机
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
log4j-scanner is a project derived from other members of the open-source community by CISA to help organizations identify potentially vulnerable web services affected by the log4j vulnerabilities.
Mooder是一款开源、安全、简洁、强大的团队内部知识分享平台。
Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
A collaborative, multi-platform, red teaming framework
使用nim编写的shellcode加载器
Fast and customizable vulnerability scanner based on simple YAML based DSL.
Nuclei documentation
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
ProjectDiscovery's Open Source Tool Manager
Helper Libraries
各种数据库的利用姿势
一款SRC密码生成工具,尝试top字典无果后,可以根据域名、公司名等因素来生成特定的字典
Python黑客编程之极速入门
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
红队作战中比较常遇到的一些重点系统漏洞整理。
从零开始学免杀
A little proxy tool based on Tencent Cloud Function Service.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.