Pinned Repositories
2024-0DAY
收集整理漏洞EXp/POC,大部分漏洞来源网络,目前收集整理了700多个poc/exp,长期更新。
ATTCK-Tools-library
TimelineSec ATT&CK 工具库
bypassmimikz
一个简单内网渗透工具免杀 目前mimikatz,frp,elevationstation,bypassuac。360报毒qvm20请更换exe图标资源。
Decrypt_Weblogic_Password
搜集了市面上绝大部分weblogic解密方式,整理了7种解密weblogic的方法及响应工具。
FireKylin
火麒麟-网络安全应急响应工具(系统痕迹采集)
openstack-autoinstall-mitaka-
openstack自动化部署
poc--exp
常用渗透poc收集
shiro_attack
shiro反序列化漏洞综合利用,包含(回显执行命令/注入内存马)
ssr-autoinstall
VUL_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等,欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
5h4d3s's Repositories
5h4d3s/Vulnerability-Wiki
一个综合漏洞知识库,集成了Vulhub、Peiqi、Edge、0sec、Wooyun等开源漏洞库
5h4d3s/log4jbypass
log4j payload mix
5h4d3s/ZheTian
ZheTian 免杀shellcode执行程序
5h4d3s/Remote_ShellcodeLoader
远程shellcode加载
5h4d3s/JNDIExploit
对原版https://github.com/feihong-cs/JNDIExploit 进行了实用化修改
5h4d3s/awesome-java-security
Java安全☞代码审计/漏洞研究/武器化
5h4d3s/java-memshell-scanner
通过jsp脚本扫描java web Filter/Servlet型内存马
5h4d3s/crowsec
视频课件和工具分享
5h4d3s/BackupOperatorToDA
From an account member of the group Backup Operators to Domain Admin without RDP or WinRM on the Domain Controller
5h4d3s/Viper-1
Redteam operation platform with webui 图形化红队行动辅助平台
5h4d3s/viper
Go configuration with fangs
5h4d3s/UserAdd
Bypass AV 用户添加
5h4d3s/poc2jar
java编写,python作为辅助依赖的漏洞验证、利用工具,另外添加了编码模块、命令模块、常见漏洞利用GUI模块,加快测试效率
5h4d3s/post-hub
后渗透:代理、C2、免杀、横向、域渗透
5h4d3s/CVE-2021-44228-Apache-Log4j-Rce
Apache Log4j 远程代码执行
5h4d3s/shellcode-
Quickly debug shellcode extracted during malware analysis
5h4d3s/CNVD-2021-49104
CNVD-2021-49104——泛微E-Office文件上传漏洞
5h4d3s/DomainPasswordSpray
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!
5h4d3s/CSAgent
CobaltStrike 4.x通用白嫖及汉化加载器
5h4d3s/pystinger
Bypass firewall for traffic forwarding using webshell 一款使用webshell进行流量转发的出网工具
5h4d3s/FuckAV
python写的一款免杀工具(shellcode加载器)BypassAV,国内杀软全过(windows denfend)2021-9-13
5h4d3s/ProxyVulns
[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] WaitForUpdate
5h4d3s/Bypass
免杀shellcode
5h4d3s/CloneX_0x727
进行克隆用户、添加用户等账户防护安全检测的轻巧工具
5h4d3s/SchTask_0x727
创建隐藏计划任务,权限维持,Bypass AV
5h4d3s/Invoke-Obfuscation-Bypass
Invoke-Obfuscation-Bypass + PS2EXE 过主流杀软
5h4d3s/ctf-tools
CTF 工具集合
5h4d3s/tubiaoqianmingweizhuang
Stealing Signatures and Making One Invalid Signature at a Time
5h4d3s/ShuiYing_0x727
检测域环境内,域机器的本地管理组成员是否存在弱口令和通用口令,对域用户的权限分配以及域内委派查询
5h4d3s/FireKylin
火麒麟-网络安全应急响应工具(系统痕迹采集)