Pinned Repositories
antispy
AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
APT_REPORT
Interesting apt report collection and some special ioc express
AttackWebFrameworkTools-5.0
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等
Awesome-Redteam
一个红队知识仓库
burp-api-drops
burp插件开发指南
collection-document
Collection of quality safety articles
CVE-2019-2888
WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
cve_2021_1732
PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
RedTeamer
红方人员作战执行手册
YOunGWebER's Repositories
YOunGWebER/collection-document
Collection of quality safety articles
YOunGWebER/cve_2021_1732
YOunGWebER/PEASS-ng
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
YOunGWebER/RedTeamer
红方人员作战执行手册
YOunGWebER/antispy
AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.
YOunGWebER/APT_REPORT
Interesting apt report collection and some special ioc express
YOunGWebER/AttackWebFrameworkTools-5.0
本软件首先集成危害性较大框架和部分主流cms的rce(无需登录,或者登录绕过执行rce)和反序列化(利用链简单)。上传getshell。sql注入等高危漏洞直接就可以拿权限出数据。其次对一些构造复杂exp漏洞进行检测。傻瓜式导入url即可实现批量测试,能一键getshell检测绝不sql注入或者不是只检测。其中thinkphp 集成所有rce Exp Struts2漏洞集成了shack2 和k8 漏洞利用工具所有Exp并对他们的exp进行优化和修复此工具的所集成漏洞全部是基于平时实战中所得到的经验从而写入到工具里。例如:通达oA一键getshell实战测试 struts2一键getshell 等等
YOunGWebER/Awesome-Redteam
一个红队知识仓库
YOunGWebER/burp-api-drops
burp插件开发指南
YOunGWebER/CVE-2019-2888
WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)
YOunGWebER/CVE-2020-17144
weaponized tool for CVE-2020-17144
YOunGWebER/CVE-2021-44228-PoC-log4j-bypass-words
🐱💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
YOunGWebER/EDR-Bypass-demo
Some demos to bypass EDRs or AVs by 78itsT3@m
YOunGWebER/ev
EV: IDS Evasion via Packet Manipulation
YOunGWebER/fscan-POC
强化fscan的漏扫POC库
YOunGWebER/idea-project-fish-exploit
JetBrains系列产品.idea钓鱼反制红队
YOunGWebER/Kernelhub
:palm_tree:Windows Kernel privilege escalation vulnerability collection, with compilation environment, demo GIF map, vulnerability details, executable file
YOunGWebER/linux-exploit-suggester
Linux privilege escalation auditing tool
YOunGWebER/LinuxTQ
《Linux提权工具与方法论》
YOunGWebER/MemShellDemo
内存马Demo合集 memshell demo for java / php / python
YOunGWebER/moonwalk
Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.
YOunGWebER/OpenWrt-CI
OpenWrt CI 在线集成自动编译环境
YOunGWebER/pentest_study
从零开始内网渗透学习
YOunGWebER/Python-100-Days
Python - 100天从新手到大师
YOunGWebER/Security_Service_Interviews
安服面经☞渗透测试/代码审计/安全研究
YOunGWebER/swagger-hack
自动化爬取并自动测试所有swagger接口
YOunGWebER/TomcatMemShell
拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马