Ghost2097221's Stars
jweny/MemShellDemo
内存马Demo合集 memshell demo for java / php / python
rebeyond/memShell
a webshell resides in the memory of java web server
la0s/Frida-scripts
分享个人工作中一些事半功倍的脚本
rtcatc/Packer-Fuzzer
Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.
rustdesk/rustdesk
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
eastmountyxz/SystemSecurity-ReverseAnalysis
该资源为系统安全和逆向分析实验,包括作者从零学习恶意代码分析、病毒逆向分析的工具及样本,基础性文章,希望对您有所帮助~
5wimming/gadgetinspector
利用链、漏洞检测工具
muurk/cobalt-safari
CobaltStrike TeamServer hunting script. Produced to identify poorly configured CobaltStrike TeamServers and catalog assocaited IOCs. Old Code. YMMV
Apr4h/CobaltStrikeScan
Scan files or process memory for CobaltStrike beacons and parse their configuration
c0ny1/java-memshell-scanner
通过jsp脚本扫描java web Filter/Servlet型内存马
QAX-A-Team/sharpwmi
sharpwmi是一个基于rpc的横向移动工具,具有上传文件和执行命令功能。
cube0x0/SharpMapExec
fortra/impacket
Impacket is a collection of Python classes for working with network protocols.
uknowsec/SharpSQLTools
SharpSQLTools 和@Rcoil一起写的小工具,可上传下载文件,xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
cnrstar/anti-honeypot
一款可以检测WEB蜜罐并阻断请求的Chrome插件
mprunet/burp-scripting
c0ny1/java-object-searcher
java内存对象搜索辅助工具
ffffffff0x/1earn
ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup
gh0stkey/HaE
HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations.
cyberark/ACLight
A script for advanced discovery of Privileged Accounts - includes Shadow Admins
vyrus001/go-mimikatz
A wrapper around a pre-compiled version of the Mimikatz executable for the purpose of anti-virus evasion.
AMJIYU/javaweb-sec
攻击Java Web应用-[Java Web安全]
longofo/rmi-jndi-ldap-jrmp-jmx-jms
rmi、jndi、ldap、jrmp、jmx、jms一些demo测试
Daybr4ak/C2ReverseProxy
一款可以在不出网的环境下进行反向代理及cs上线的工具
byt3bl33d3r/OffensiveNim
My experiments in weaponizing Nim (https://nim-lang.org/)
cdk-team/CDK
📦 Make security testing of K8s, Docker, and Containerd easier.
Daybr4ak/ShiroScan
burp插件 ShiroScan 主要用于框架、无dnslog key检测
Wfzsec/ysoserial-poc
记录调试分析ysoserial系列的学习过程,主要包含手动构造的一些poc,便于加深对漏洞和工具的理解
0xn0ne/weblogicScanner
weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883
YDHCUI/csload.net
一个cobaltstrike shellcode加载器,过国内主流杀软