Pinned Repositories
active_c2_ioc_public
Active C2 IoCs
Advanced-SQL-Injection-Cheatsheet
A cheat sheet that contains advanced queries for SQL Injection of all types.
API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
AppLocker-Guidance
Configuration guidance for implementing application whitelisting with AppLocker. iadgov
apt2
automated penetration toolkit
AssetManage
AtomicWatch
Intel Atom C2000 series discovery tool that parses log files and returns results if a positive match is found. iadgov
BruteShark
Network Analysis Tool
hackeyes.github.io
hackeyes's Repositories
hackeyes/hackeyes.github.io
hackeyes/active_c2_ioc_public
Active C2 IoCs
hackeyes/Advanced-SQL-Injection-Cheatsheet
A cheat sheet that contains advanced queries for SQL Injection of all types.
hackeyes/checkburp
Detect burp
hackeyes/cve-2021-21985_exp
cve-2021-21985 exploit
hackeyes/CVE-2021-27850_POC
A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated remote code execution.
hackeyes/CVE-2022-1388-POC
BIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388
hackeyes/CVE-2022-21907
Windows HTTP协议栈远程代码执行漏洞 CVE-2022-21907
hackeyes/CyberSpaceSearchEngine-Research
hackeyes/dismap
Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点
hackeyes/exploits
hackeyes/F5-CVE-2022-1388-Exploit
Exploit and Check Script for CVE 2022-1388
hackeyes/Hitomi-Downloader
:cake: Desktop utility to download images/videos/music/text from various websites, and more.
hackeyes/insight
洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。
hackeyes/insight2
hackeyes/Malware-IOCs
hackeyes/NC-BeanShell-RCE
CNVD-2021-30167 用友NC BeanShell远程代码执行
hackeyes/redteam_vul
红队作战中比较常遇到的一些重点系统漏洞整理。
hackeyes/script
各种脚本、漏洞利用工具
hackeyes/seeyou_exp
致远OA漏洞综合利用脚本
hackeyes/Solr-SSRF
Apache Solr SSRF(CVE-2021-27905)
hackeyes/spring-core-rce
about spring core rce
hackeyes/SpringBoot-Scan
针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具
hackeyes/TLS-Scanner
The TLS-Scanner Module from TLS-Attacker
hackeyes/TongdaOA-exp
TongdaOA 11.7 ~11.8 通达OA，任意用户登录+后台getshell
hackeyes/Vulnerability
此项目将不定期从棱角社区对外进行公布一些最新漏洞。
hackeyes/weaver_exp
泛微OA漏洞综合利用脚本
hackeyes/Yasso
强大的内网渗透辅助工具集-让Yasso像风一样 支持rdp，ssh，redis，postgres，mongodb，mssql，mysql，winrm等服务爆破，快速的端口扫描，强大的web指纹识别，各种内置服务的一键利用（包括ssh完全交互式登陆，mssql提权，redis一键利用，mysql数据库查询，winrm横向利用，多种服务利用支持socks5代理执行）
hackeyes/Z1-AggressorScripts
适用于Cobalt Strike的插件
hackeyes/zero-crack
webapps crack tools