yu5239 Goto Github PK

ahrid

AHRID - Analysis Hacker's Real-ID Platform

appshark

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

apt_report

Interesting apt report collection and some special ioc express

csonvps

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计

ctf_hacker-tools

CTF-渗透测试~工具合集

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

cve-2023-21768-afd-for-winsock-eop-exploit

cybersecuritynote

信息安全笔记（JAVA安全、代码审计、红队攻防、渗透测试）

dict-hub

字典仓库：口令、子域名、Web接口、Web参数

empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

fluxion

Fluxion is a remake of linset by vk496 with enhanced functionality.

goblin

一款适用于红蓝对抗中的仿真钓鱼系统

gobyvuls

Vulnerabilities of Goby supported with exploitation.

hfish

🍯 A Most Convenient Honeypot Platform. 🐝🐝🐝 🐝🐝

honeypotcollection

蜜罐集合

http_server

实现http服务器，支持文件夹/文件上传和下载

k8tools

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

log4j-payload-generator

Log4j jndi injects the Payload generator

log4j2-cve-2021-44228

Remote Code Injection In Log4j

log4j2-intranet-scan

log4j2内网扫描

neo-regeorg

Neo-reGeorg is a project that seeks to aggressively refactor reGeorg

nopen

NOPEN Tool 又名“morerats” 莫雷斯特，是方程式工具包里的工具。

pocsploit

a lightweight, flexible and novel open source poc verification framework

pyke-shiro

复杂请求下的Shiro反序列化利用工具

pystinger

bypass firewall by webshell 一款使用webshell进行流量转发的出网工具

rabr

Redis-Attack By Replication (通过主从复制攻击Redis)

rce-0-day-for-ghostscript-9.50

RCE 0-day for GhostScript 9.50 - Payload generator

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shiro_rce

shiro rce 反序列 命令执行 一键工具

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list