H9dawn

H9dawn's Stars

• PowerShell/PowerShell

  PowerShell for every system!

  Language:C#46k1.4k12.6k7.4k

• pwntester/ysoserial.net

  Deserialization payload generator for a variety of .NET formatters

  Language:C#3.3k7562480

• wgpsec/ENScan_GO

  一款基于各大企业信息API的工具，解决在遇到的各种针对国内企业信息收集难题。一键收集控股公司ICP备案、APP、小程序、微信公众号等信息聚合导出。

  Language:Go3.2k33135309

• Clouditera/SecGPT

  SecGPT网络安全大模型

  Language:Python2k2061269

• pen4uin/java-memshell-generator

  一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

  Language:Java1.8k2132198

• whwlsfb/BurpCrypto

  BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

  Language:Java1.5k1446173

• whwlsfb/JDumpSpider

  HeapDump敏感信息提取工具

  Language:Java1.4k148136

• f0ng/autoDecoder

  Burp插件，根据自定义来达到对数据包的处理（适用于加解密、爆破等），类似mitmproxy，不同点在于经过了burp中转，在自动加解密的基础上，不影响APP、网站加解密正常逻辑等。

  Language:Java999113883

• Cool-Coding/remote-desktop-control

  远程桌面控制(Spring+Netty+Swing)

  Language:Java9473839308

• jar-analyzer/jar-analyzer-v1-gui

  建议使用新版：https://github.com/jar-analyzer/jar-analyzer

  Language:Java8971092107

• gh0stkey/CaA

  CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.

  Language:Java866132356

• c0ny1/java-object-searcher

  java内存对象搜索辅助工具

  Language:Java79311686

• whwlsfb/Log4j2Scan

  Log4j2 RCE Passive Scanner plugin for BurpSuite

  Language:Java781135995

• Hel10-Web/Databasetools

  一款用Go语言编写的数据库自动化提权工具，支持Mysql、MSSQL、Postgresql、Oracle、Redis数据库提权、命令执行、爆破以及ssh连接

  Language:Go76591492

• c0olw/NacosRce

  Nacos JRaft Hessian 反序列化 RCE 加载字节码 注入内存马 不出网利用

  Language:Java75751285

• 4ra1n/mysql-fake-server

  MySQL Fake Server (纯Java实现，支持GUI版和命令行版，提供Dockerfile，支持多种常见JDBC利用)

  Language:Java7027678

• proudwind/javasec_study

  java代码审计学习笔记

  6254080

• hosch3n/msmap

  Msmap is a Memory WebShell Generator.

  Language:Python57613091

• ethicalhackingplayground/ssrf-king

  SSRF plugin for burp Automates SSRF Detection in all of the Request

  Language:Java5629658

• gubeihc/blasting

  Language:Python545132847

• langsasec/Sign-Sacker

  Sign-Sacker(签名掠夺者)：一款数字签名复制器，可将其他官方exe中数字签名，图标，详细信息复制到没有签名的exe中，作为免杀，权限维持，伪装的一种小手段。

  Language:Python5286482

• vngkv123/aSiagaming

  My Chrome and Safari exploit code + write-up repo

  Language:JavaScript527383104

• kyo-w/router-router

  Java web路由内存分析工具

  Language:Java4306525

• crisprss/BypassUserAdd

  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化

  Language:C++3323141

• BeichenDream/GodzillaMemoryShellProject

  Language:Java2583233

• Y4Sec-Team/mysql-jdbc-tricks

  JDBC Attack Tricks

  Language:Java1370012

• Binject/exec2shell

  Extracts TEXT section of a PE, ELF, or Mach-O executable to shellcode

  Language:Go102219

• BeichenDream/GodzillaMemoryShellProject.NET

  Language:C#882017

• kyo-w/Spel-research

  Spel-research

  Language:Java26102

• burp-ext-CryptoTools/CryptoTools

  Language:Java12111