yuanqi-che Goto Github PK

2021_hvv

2021 hw

awesome-malware-analysis

Defund the Police.

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

bypassantivirus

远控免杀系列文章及配套工具，汇总测试了互联网上的几十种免杀工具、113种白名单免杀方式、8种代码编译免杀、若干免杀实战技术，并对免杀效果进行了一一测试，为远控的免杀和杀软对抗免杀提供参考。

cms-hunter

CMS漏洞测试用例集合

cnvd-2020-10487-tomcat-ajp-lfi

Tomcat-Ajp协议文件读取漏洞

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

conote-community

Conote 综合安全测试平台社区版。

ctf_ics_traffic

工控CTF比赛工具，各种网络数据包处理脚本

cve-2020-0787-exp-all-windows-version

Support ALL Windows Version

cybersecurityrss

CyberSecurityRSS: 优秀的网络安全知识来源 / A collection of cybersecurity rss to make you better!

dirscan

DirScan是一款探测网站路径存活的工具,扫描批量网站的路径(目录或文件或Api)，快速发现薄弱点

druid_sessions

eburst

这个脚本主要提供对Exchange邮件服务器的账户爆破功能，集成了现有主流接口的爆破方式。

empire

Empire is a PowerShell and Python post-exploitation agent.

exp-tools

一款集成各种exp的实用性工具

frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

fuzz_dic

参数 | 字典 collections

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

hello-world

hosts_scan

这是一个用于IP和域名碰撞匹配访问的小工具，旨意用来匹配出渗透过程中需要绑定hosts才能访问的弱主机或内部系统。

http-request-smuggling-checker

A tool to quickly check HTTP-Request-Smuggling, written by python3

httpx

httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

icsmaster

ICS/SCADA Security Resource（整合工控安全相关资源）

jsfinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

kernelhub

:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file

ksubdomain

无状态子域名爆破工具

ladon

大型内网渗透扫描器&Cobalt Strike，Ladon7.2内置94个模块，包含信息收集/存活主机/IP扫描/端口扫描/服务识别/网络资产/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010、SMBGhost、Weblogic、ActiveMQ、Tomcat、Struts2系列，密码口令爆破(Mysql、Oracle、MSSQL)、FTP、SSH(Linux)、VNC、Windows(IPC、WMI、SMB、Netbios、LDAP、SmbHash、WmiHash、Winrm),远程执行命令(wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

marshalsec-jar

marshalsec-0.0.3-SNAPSHOT-all compiled on X64