yizhimanpadewoniu Goto Github PK

dnspop

Analysis of DNS records to find popular trends

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

docker-docs

dongtai

DongTai is an interactive application security testing(IAST) product that supports the detection of OWASP WEB TOP 10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities, etc.

dorabox

DoraBox,多拉盒 - 掌握常见漏洞攻防，快速提升渗透能力

dpia

GDPR个人数据合规评估

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

dumb-password-rules

Shaming sites with dumb password rules.

electron-quick-start

Clone to try a simple Electron app

emergency

应急响应脚本

emergency-response-notes

应急响应实战笔记，一个安全工程师的自我修养。

emv-nfc-paycard-enrollment

A Java library used to read and extract data from NFC EMV credit cards (Android/PCSC).

enterprise-security-skill

用于记录企业安全规划，建设，运营，攻防的相关资源

erebus

CobaltStrike后渗透测试插件

exp

收集各种各样的exp

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-5902、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

exploit-dictionary

exploit-scripts

存放一些自己写过的漏洞利用脚本

exploits

Miscellaneous exploit code

exploits-1

¯\_(ツ)_/¯

exploits-2

Exploits developed by me.

f-middlewarescan

A vulnerability detection scripts for middleware services

f-middlewarescan-1

f-scrack

fart

ART环境下自动化脱壳方案

fast-rdp-brute-gui-v2.0-by_stas-m--official

Fast-RDP-Brute(frdpb)官方版，及获取来源

fastjson

Fastjson姿势技巧集合

fastjson-jdbcrowsetimpl-rce

JNDI加载RMIServer，对FastJson的反序列化攻击，附漏洞环境 & 利用Exp。护网杯CTF比赛原型题目“easy_web”。

fastjson-rce-exploit

exploit for fastjson remote code execution vulnerability

fastjson-remote-code-execute-poc

fastjson remote code execute poc 直接用intellij IDEA打开即可 首先编译得到Test.class，然后运行Poc.java