0x24bin

Pinned Repositories

0day
各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新
Language:C11 1 017
Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
1 2 00
chunked-coding-converter
Burp suite 分块传输辅助插件
Language:Java1 3 00
CIAHackingTools
WikiLeaks Vault 7 CIA Hacking Tools
Language:HTML1 3 00
crawl_vuls_lib
漏洞库、产品库爬虫
Language:Python7 3 07
gorequest
This Project is made for spoofing Ja3 and Akamai fingerprint, it is also very simple to use. I made it noob-friendly as possiable.
Language:Go2 2 05
InsectsAwake
Network Vulnerability Scanner
Language:Python2 2 00
nagios-weixin
nagios 微信告警
Language:Python3 3 00
Tianyancha
scrapy 爬取天眼查网站的公司注册信息
Language:Python7 3 032
WebMonitor
网站监控
Language:Python10 2 04

0x24bin's Repositories

0x24bin/apache-log4j-poc
Apache Log4j 远程代码执行
Language:Java1 0
0x24bin/BurpFastJsonScan
一款基于BurpSuite的被动式FastJson检测插件
Language:Java1 0
0x24bin/ctf-archives
CTF Archives: Collection of CTF Challenges.
Language:JavaScript1 0
0x24bin/fastjson-check
fastjson 被动扫描、不出网payload生成
1 0
0x24bin/goblin
一款适用于红蓝对抗中的仿真钓鱼系统
Language:Go1 0
0x24bin/HostCollision
用于host碰撞而生的小工具,专门检测渗透中需要绑定hosts才能访问的主机或内部系统
Language:Java2 0
0x24bin/JEECMS-INJECT
JEECMS FreeMarker-RCE
Language:Python2 0
0x24bin/JNDIKit
JNDI/LDAP注入利用工具，对命令进行两种编码，支持多种绕过高版本JDK的方式（参考大佬代码造的轮子）
Language:Java1 0
0x24bin/JNDIMonitor
一个LDAP请求监听器，摆脱dnslog平台
Language:Java2 0
0x24bin/JNDIScan
无须借助dnslog且完全无害的JNDI反连检测工具，解析RMI和LDAP协议实现，可用于甲方内网自查
Language:Go1 0
0x24bin/JSP-Webshells
Collect JSP webshell of various implementation methods. 收集JSP Webshell的各种姿势
Language:Java1 0
0x24bin/JSPHorse
结合反射调用、Javac动态编译、ScriptEngine调用JS技术和各种代码混淆技巧的一款免杀JSP Webshell生成工具，已支持蚁剑免杀
Language:Java1 0
0x24bin/JSPKiller
基于污点分析的JSP Webshell检测工具，模拟JVM的栈帧操作进行数据流分析，可以检测出各种变形的JSP Webshell
Language:Java1 0
0x24bin/JSScanner
Js File Scanner
Language:Python1 0
0x24bin/LatLonToAddress
经纬度坐标点转换为地址信息
Language:Python1 0
0x24bin/linbing
本系统是对目标进行漏洞扫描的一个系统,前端采用vue技术,后端采用fastapi.核心原理是扫描主机的开放端口情况,然后根据端口情况逐个去进行poc检测,poc有110多个,包含绝大部分的中间件漏洞,本系统的poc皆来源于网络或在此基础上进行修改
Language:Python1 0
0x24bin/Log4j2Scan
Log4j2 RCE Passive Scanner plugin for BurpSuite
Language:Java1 0
0x24bin/Log4j2Scan-1
log4j2 burp扫描插件 | 兼容各种格式的请求 | 漏报少 | 标识性Payload | 绕waf
Language:Java1 0
0x24bin/log4j_vuln
log4j漏洞靶场docker-compose
1 0
0x24bin/log4shell_1.x
log4j 1.x RCE Poc
Language:Java2 0
0x24bin/noPac
CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
Language:C#1 0
0x24bin/noPac-1
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Language:Python1 0
0x24bin/PoC-2
Our PoC for the vulnerable products
Language:PHP2 0
0x24bin/PwdBUD
一款SRC密码生成工具，尝试top字典无果后，可以根据域名、公司名等因素来生成特定的字典
Language:Python1 0
0x24bin/sam-the-admin
Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user
Language:Python1 0
0x24bin/Savior
渗透测试报告自动生成工具！
Language:JavaScript1 0
0x24bin/ShiroMemShell
如何从Shiro反序列化到注入内存马以及解决请求头过大问题
Language:Java1 0
0x24bin/SpringBootExploit
项目是根据LandGrey/SpringBootVulExploit清单编写，目的hvv期间快速利用漏洞、降低漏洞利用门槛。
Language:Java2 0
0x24bin/unidbg-boot-server
unidbg-server
Language:Java1 0
0x24bin/wechat-bot
带二次开发接口的PC微信聊天机器人
Language:C++1 0